Package rekall :: Package plugins :: Package common :: Module pas2kas :: Class Pas2VasResolver
[frames] | no frames]

Class Pas2VasResolver

source code


An object which resolves physical addresses to virtual addresses.

Instance Methods
 
__init__(self, session)
x.__init__(...) initializes x; see help(type(x)) for signature
source code
 
GetTaskStruct(self, address)
Returns the task struct for the address.
source code
 
PA2VA_for_DTB(self, physical_address, dtb, userspace=None) source code
 
build_address_map(self, dtb, userspace=True)
Given the virtual_address_space, build the address map.
source code

Inherited from object: __delattr__, __format__, __getattribute__, __hash__, __new__, __reduce__, __reduce_ex__, __repr__, __setattr__, __sizeof__, __str__, __subclasshook__

Properties

Inherited from object: __class__

Method Details

__init__(self, session)
(Constructor)

source code 

x.__init__(...) initializes x; see help(type(x)) for signature

Overrides: object.__init__
(inherited documentation)

GetTaskStruct(self, address)

source code 

Returns the task struct for the address.

Should be overridden by OS specific implementations.