Trees | Indices | Help |
|
---|
|
An enumeration which receives its value from a callable.
Nested Classes | |
__metaclass__ Give each object a unique ID. (Inherited from rekall.obj.BaseObject) |
Instance Methods | |||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
Inherited from |
Class Methods | |||
|
Class Variables | |
obj_name = <No name>
(Inherited from rekall.obj.BaseObject)
|
|
obj_parent = <No parent>
(Inherited from rekall.obj.BaseObject)
|
|
obj_producers = None hash(x) (Inherited from rekall.obj.BaseObject) |
Properties | |
indices Returns (usually 1) representation(s) of self usable as dict keys. (Inherited from rekall.obj.BaseObject) |
|
obj_end (Inherited from rekall.obj.BaseObject) | |
obj_size (Inherited from rekall.plugins.overlays.basic.Enumeration) | |
parents Returns all the parents of this object. (Inherited from rekall.obj.BaseObject) |
|
reverse_choices (Inherited from rekall.plugins.overlays.basic.Enumeration) | |
Inherited from |
Method Details |
Construct an enumeration instance. The enumeration is constructed over the top of a target (which is assumed to produce an integer value). The value of the target is then looked up in the choices. Note that the enumeration is treated as an integer. Args: choices: A dict of int values (keys) and names (values). enum_name: If provided, the choices dict is retrieved from the profile's constant area. This avoids the profile generator from having to make copies of the enum choices for each field which uses the same enum. target: The target type which we overlay on. value: Usually the value is parsed from the address space, but if the value parameter is provided, we initialize from this value. default: If the underlying integer does not appear in the choices dict, we use this default value.
|
Do the actual reading and decoding of this member When vm is specified, we are asked to evaluate this object is another address space than the one it was created on. Derived classes should allow for this.
|
Trees | Indices | Help |
|
---|
Generated by Epydoc 3.0.1 on Mon Oct 9 03:28:30 2017 | http://epydoc.sourceforge.net |