Package rekall :: Package plugins :: Package darwin :: Module common :: Class ProcessFilterMixin

Class ProcessFilterMixin

Adds methods and arguments that enable easy fitlering by process.

Instance Methods

filter_processes(self)
Filters proc list using phys_proc and pids lists.

source code

virtual_process_from_physical_offset(self, physical_offset)
Tries to return an proc in virtual space from a physical offset.

source code

Inherited from object: __delattr__, __format__, __getattribute__, __hash__, __init__, __new__, __reduce__, __reduce_ex__, __repr__, __setattr__, __sizeof__, __str__, __subclasshook__

Class Methods

methods(cls)
Return the names of available proc enumeration methods.

source code

Properties
	filtering_requested
Inherited from `object`: `__class__`

Method Details

virtual_process_from_physical_offset(self, physical_offset)

source code

Tries to return an proc in virtual space from a physical offset.

We do this by reflecting off the list elements.

Args:
   physical_offset: The physcial offset of the process.

Returns:
   A proc object or a NoneObject on failure.

Property Details

filtering_requested

Get Method:: unreachable.filtering_requested(self)