Trees | Indices | Help |
|
---|
|
Specialized symbol-offset index for linux.
Nested Classes | |
__metaclass__ Automatic Plugin Registration through metaclasses. (Inherited from rekall.obj.Profile) |
|
top_level_class A collection of types relating to a single compilation unit. (Inherited from rekall.obj.Profile) |
Instance Methods | |||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
Inherited from |
Class Methods | |||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
Class Variables | |
COMMON_CLASSES =
(Inherited from rekall.obj.Profile)
|
|
EMPTY_DESCRIPTOR =
(Inherited from rekall.obj.Profile)
|
|
GOOD_MATCH = 0.75
(Inherited from rekall.plugins.common.profile_index.Index)
|
|
METADATA =
(Inherited from rekall.obj.Profile)
|
|
PERFECT_MATCH = 1.0
(Inherited from rekall.plugins.common.profile_index.Index)
|
|
applied_modifications = None hash(x) (Inherited from rekall.obj.Profile) |
|
base_offset = 0
(Inherited from rekall.plugins.common.profile_index.Index)
|
|
classes =
(Inherited from rekall.obj.Profile)
|
|
classes_by_name =
(Inherited from rekall.obj.Profile)
|
|
constants = None hash(x) (Inherited from rekall.obj.Profile) |
|
index = None hash(x) (Inherited from rekall.plugins.common.profile_index.Index) |
|
overlays = None hash(x) (Inherited from rekall.obj.Profile) |
|
plugin_feature =
(Inherited from rekall.obj.Profile)
|
|
types = None hash(x) (Inherited from rekall.obj.Profile) |
|
vtypes = None hash(x) (Inherited from rekall.obj.Profile) |
Properties | |
duplicates (Inherited from rekall.plugins.common.profile_index.SymbolOffsetIndex) | |
hashes (Inherited from rekall.plugins.common.profile_index.SymbolOffsetIndex) | |
profiles (Inherited from rekall.plugins.common.profile_index.SymbolOffsetIndex) | |
traits (Inherited from rekall.plugins.common.profile_index.SymbolOffsetIndex) | |
Inherited from |
Method Details |
Filters a dict of symbols, discarding irrelevant ones.
|
Builds a SymbolOffset index from traits, profiles, hashes and a spec. Args: hashes: A dictionary of hash:profile_id. Hashes must be obtained via the SymbolOffsetIndex.CalculateRawProfileHash() method. traits: A dictionary of profile_id:traits. Traits are the result of calling the SymbolOffsetIndex.FindTraits() method. profiles: A dictionary of profile_id metadata. Profile metadata is obtained via SymbolOffsetIndex.GetProfileMetadata(). duplicates: A list of newly found profile ids that are duplicate.
|
|
|
Trees | Indices | Help |
|
---|
Generated by Epydoc 3.0.1 on Mon Oct 9 03:28:04 2017 | http://epydoc.sourceforge.net |