Package rekall :: Package plugins :: Package overlays :: Module basic :: Class RelativeOffsetMixin
[frames] | no frames]

Class RelativeOffsetMixin

source code


A mixin which shifts all constant addresses by a constant.

Instance Methods
 
__init__(self, **kwargs)
x.__init__(...) initializes x; see help(type(x)) for signature
source code
 
GetImageBase(self) source code
 
add_constants(self, constants=None, constants_are_absolute=False, **opts) source code
 
get_constant(self, name, is_address=False)
Gets the constant from the profile.
source code
 
get_nearest_constant_by_address(self, address, below=True) source code

Inherited from object: __delattr__, __format__, __getattribute__, __hash__, __new__, __reduce__, __reduce_ex__, __repr__, __setattr__, __sizeof__, __str__, __subclasshook__

Properties

Inherited from object: __class__

Method Details

__init__(self, **kwargs)
(Constructor)

source code 

x.__init__(...) initializes x; see help(type(x)) for signature

Overrides: object.__init__
(inherited documentation)

get_constant(self, name, is_address=False)

source code 

Gets the constant from the profile.

The windows profile specify addresses relative to the kernel image base.