Trees | Indices | Help |
|
---|
|
Get and cache the object type map.
In windows 7, rather than store a pointer to the _OBJECT_TYPE object directly, there is a global table of object types, and the object simply stores an index to it.
Nested Classes | |
__metaclass__ Automatic Plugin Registration through metaclasses. (Inherited from rekall.kb.ParameterHook) |
|
top_level_class A mechanism for automatically calculating a parameter. (Inherited from rekall.kb.ParameterHook) |
Instance Methods | |||
|
|||
|
|||
Inherited from |
Class Methods | |||
|
|||
|
|||
|
Class Variables | |
name =
hash(x) |
|
classes =
(Inherited from rekall.kb.ParameterHook)
|
|
classes_by_name =
(Inherited from rekall.kb.ParameterHook)
|
|
expiry = None hash(x) (Inherited from rekall.kb.ParameterHook) |
|
mode = None hash(x) (Inherited from rekall.plugin.ModeBasedActiveMixin) |
|
plugin_feature =
(Inherited from rekall.kb.ParameterHook)
|
|
volatile = True
(Inherited from rekall.kb.ParameterHook)
|
Properties | |
Inherited from |
Method Details |
Derive the value of the parameter.
|
|
|
Trees | Indices | Help |
|
---|
Generated by Epydoc 3.0.1 on Mon Oct 9 03:28:37 2017 | http://epydoc.sourceforge.net |