Package rekall :: Package plugins :: Package common :: Module pfn :: Class VADMapMixin
[frames] | no frames]

Class VADMapMixin

source code


A plugin to display information about virtual address pages.

Instance Methods
 
FormatMetadata(self, type, metadata, offset=None) source code
 
GeneratePageMetatadata(self, task)
A Generator of vaddr, metadata for each page.
source code
 
collect(self) source code

Inherited from object: __delattr__, __format__, __getattribute__, __hash__, __init__, __new__, __reduce__, __reduce_ex__, __repr__, __setattr__, __sizeof__, __str__, __subclasshook__

Class Variables
  name = 'vadmap'
  table_header = [{'hidden': True, 'name': '_EPROCESS', 'type': ...
Properties

Inherited from object: __class__

Class Variable Details

table_header

Value:
[{'hidden': True, 'name': '_EPROCESS', 'type': '_EPROCESS'},
 {'name': 'Divider', 'type': 'Divider'},
 {'name': 'VAddr', 'style': 'address'},
 {'hidden': True, 'name': 'PAddr', 'style': 'address'},
 {'name': 'length', 'style': 'address'},
 {'name': 'type', 'width': 20},
 {'name': 'comment'}]