Package rekall :: Package plugins :: Package darwin :: Module pas2kas :: Class DarwinPas2VasResolver

Class DarwinPas2VasResolver

Instance Methods

GetTaskStruct(self, addrress)
Returns the task struct for the address.

source code

PA2VA_for_DTB(self, physical_address, dtb, userspace=None) (Inherited from rekall.plugins.common.pas2kas.Pas2VasResolver)

source code

__init__(self, session)
x.__init__(...) initializes x; see help(type(x)) for signature (Inherited from rekall.plugins.common.pas2kas.Pas2VasResolver)

source code

build_address_map(self, dtb, userspace=True)
Given the virtual_address_space, build the address map. (Inherited from rekall.plugins.common.pas2kas.Pas2VasResolver)

source code

Inherited from object: __delattr__, __format__, __getattribute__, __hash__, __new__, __reduce__, __reduce_ex__, __repr__, __setattr__, __sizeof__, __str__, __subclasshook__

Properties
Inherited from `object`: `__class__`

Method Details

GetTaskStruct(self, addrress)

source code

Returns the task struct for the address.

Should be overridden by OS specific implementations.

Overrides: common.pas2kas.Pas2VasResolver.GetTaskStruct: (inherited documentation)