Package rekall :: Package plugins :: Package filesystems :: Module ntfs :: Class NTFSDetector

Class NTFSDetector

Nested Classes
	__metaclass__ Automatic Plugin Registration through metaclasses. (Inherited from rekall.plugins.guess_profile.DetectionMethod)
	top_level_class A baseclass to implement autodetection methods. (Inherited from rekall.plugins.guess_profile.DetectionMethod)

Instance Methods

Offsets(self)
Return a list of offsets we care about.

source code

DetectFromHit(self, hit, _, address_space)
Gets called for each hit.

source code

Keywords(self)
Returns a list of keywords which will be searched. (Inherited from rekall.plugins.guess_profile.DetectionMethod)

source code

VerifyProfile(self, profile_name)
Check that the profile name is valid. (Inherited from rekall.plugins.guess_profile.DetectionMethod)

source code

__init__(self, session=None)
x.__init__(...) initializes x; see help(type(x)) for signature (Inherited from rekall.plugins.guess_profile.DetectionMethod)

source code

Inherited from object: __delattr__, __format__, __getattribute__, __hash__, __new__, __reduce__, __reduce_ex__, __repr__, __setattr__, __sizeof__, __str__, __subclasshook__

Class Methods

ImplementationByClass(self, name)

source code

ImplementationByName(self, name)

source code

Class Variables
	name = `'ntfs'` hash(x)
	classes = `{'DarwinIndexDetector': <class 'rekall.plugins.guess...` (Inherited from rekall.plugins.guess_profile.DetectionMethod)
	classes_by_name = `{None: [<class 'rekall.plugins.guess_profile...` (Inherited from rekall.plugins.guess_profile.DetectionMethod)
	find_dtb_impl = `None` hash(x) (Inherited from rekall.plugins.guess_profile.DetectionMethod)
	order = `100` (Inherited from rekall.plugins.guess_profile.DetectionMethod)
	plugin_feature = `'DetectionMethod'` (Inherited from rekall.plugins.guess_profile.DetectionMethod)