Trees | Indices | Help |
|
---|
|
Walks open files of each proc and collects the fileproc.
This is the same algorithm as lsof, but aimed at just collecting the fileprocs, without doing anything with them, or sorting.
Nested Classes | |
__metaclass__ Automatic Plugin Registration through metaclasses. (Inherited from rekall.plugin.Command) |
|
top_level_class A command can be run from the rekall command line. (Inherited from rekall.plugin.Command) |
Instance Methods | |||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
Inherited from |
Class Methods | |||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
Class Variables | |
name =
|
|
type_name =
hash(x) |
|
PHYSICAL_AS_REQUIRED = True
(Inherited from rekall.plugin.PhysicalASMixin)
|
|
PROFILE_REQUIRED = True
(Inherited from rekall.plugin.ProfileCommand)
|
|
ROW_OPTIONS =
(Inherited from rekall.plugin.TypedProfileCommand)
|
|
classes =
(Inherited from rekall.plugin.Command)
|
|
classes_by_name =
(Inherited from rekall.plugin.Command)
|
|
error_status = None hash(x) (Inherited from rekall.plugin.Command) |
|
interactive = False
(Inherited from rekall.plugin.Command)
|
|
mode =
hash(x) (Inherited from rekall.plugins.darwin.common.DarwinOnlyMixin) |
|
plugin_args = None hash(x) (Inherited from rekall.plugin.ArgsParserMixin) |
|
plugin_feature =
(Inherited from rekall.plugin.Command)
|
|
producer = True
(Inherited from rekall.plugin.Producer)
|
|
table_options =
(Inherited from rekall.plugin.TypedProfileCommand)
|
Properties | |
filtering_requested (Inherited from rekall.plugins.darwin.common.ProcessFilterMixin) | |
table_header hash(x) (Inherited from rekall.plugin.Producer) |
|
Inherited from |
Method Details |
Collect data that will be passed to renderer.table_row.
|
|
|
Trees | Indices | Help |
|
---|
Generated by Epydoc 3.0.1 on Mon Oct 9 03:28:08 2017 | http://epydoc.sourceforge.net |