Package rekall :: Package plugins :: Package common :: Package efilter_plugins :: Module ipython :: Class EfilterMagics
[frames] | no frames]

Class EfilterMagics

source code


Instance Methods
 
SELECT(self, line, cell=None) source code
 
select(self, line, cell=None)
This makes it easier to run the search plugin:
source code
 
pager(self, line, cell=None) source code

Inherited from IPython.core.magic.Magics: __init__, arg_err, default_option, format_latex, parse_options

Inherited from traitlets.config.configurable.Configurable: update_config

Inherited from traitlets.traitlets.HasTraits: __getstate__, __setstate__, add_traits, has_trait, hold_trait_notifications, notify_change, observe, on_trait_change, set_trait, setup_instance, trait_metadata, trait_names, traits, unobserve, unobserve_all

Inherited from object: __delattr__, __format__, __getattribute__, __hash__, __reduce__, __reduce_ex__, __repr__, __setattr__, __sizeof__, __str__, __subclasshook__

Class Methods

Inherited from traitlets.config.configurable.Configurable: class_config_rst_doc, class_config_section, class_get_help, class_get_trait_help, class_print_help, section_names

Inherited from traitlets.traitlets.HasTraits: class_own_trait_events, class_own_traits, class_trait_names, class_traits, trait_events

Static Methods

Inherited from traitlets.traitlets.HasDescriptors: __new__

Class Variables
  magics = {'cell': {'SELECT': 'SELECT', 'pager': 'pager', 'sele...
hash(x)
  registered = True

Inherited from IPython.core.magic.Magics: options_table, shell

Inherited from traitlets.config.configurable.Configurable: config, parent

Properties

Inherited from traitlets.traitlets.HasTraits: cross_validation_lock

Inherited from object: __class__

Method Details

SELECT(self, line, cell=None)

source code 
Decorators:
  • @magic.line_cell_magic

select(self, line, cell=None)

source code 
This makes it easier to run the search plugin:

[1] win7.elf 15:35:09> select * from pslist() where _EPROCESS.name =~ "svchost"
  _EPROCESS            Name          PID   PPID   Thds    Hnds    Sess  Wow64
-------------- -------------------- ----- ------ ------ -------- ------ ------
0xfa80024f85d0 svchost.exe            236    480     19      455      0 False
0xfa80023f6770 svchost.exe            608    480     12      352      0 False
        

Decorators:
  • @magic.line_cell_magic

pager(self, line, cell=None)

source code 
Decorators:
  • @magic.line_cell_magic

Class Variable Details

magics

hash(x)

Value:
{'cell': {'SELECT': 'SELECT', 'pager': 'pager', 'select': 'select'},
 'line': {'SELECT': 'SELECT', 'pager': 'pager', 'select': 'select'}}