Trees       Indices       Help   
Rekall Memory Forensics
Package rekall :: Package plugins :: Package common :: Module sigscan :: Class SigScanMixIn
[frames] | no frames]

Class SigScanMixIn

source code

Scan memory for signatures.

Instance Methods
 
__init__(self, signature=None, scan_kernel=False, scan_physical=False, **kwargs)
Scan using custom signatures.		 source code
 
render(self, renderer)
Render output.		 source code
 
generate_hits(self, address_space, end=18446744073709551616) source code
 
render_physical_scan(self, renderer)
This method scans the physical memory.		 source code
 
render_kernel_scan(self, renderer)
This method scans the kernel memory.		 source code
 
render_task_scan(self, renderer, task)
This method scans the AS of a single task.		 source code

Inherited from object: __delattr__, __format__, __getattribute__, __hash__, __new__, __reduce__, __reduce_ex__, __repr__, __setattr__, __sizeof__, __str__, __subclasshook__

Class Methods
 
args(cls, parser) source code
Class Variables
  name = 'sigscan'
Properties

Inherited from object: __class__

Method Details

__init__(self, signature=None, scan_kernel=False, scan_physical=False, **kwargs)
(Constructor)

source code 

Scan using custom signatures.

Overrides: object.__init__

   Trees       Indices       Help   
Rekall Memory Forensics
Generated by Epydoc 3.0.1 on Mon Oct 9 03:28:04 2017 http://epydoc.sourceforge.net