Package rekall :: Package plugins :: Package response :: Module forensic_artifacts :: Class WMISourceType

Class WMISourceType

Instance Methods

apply(self, session=None, **kwargs)
Generate ArtifactResult instances.

source code

__init__(self, source_definition, artifact=None)
x.__init__(...) initializes x; see help(type(x)) for signature (Inherited from rekall.plugins.response.forensic_artifacts.SourceType)

source code

is_active(self, session=None)
Determine if this source is active. (Inherited from rekall.plugins.response.forensic_artifacts.LiveModeSourceMixin)

source code

Inherited from object: __delattr__, __format__, __getattribute__, __hash__, __new__, __reduce__, __reduce_ex__, __repr__, __setattr__, __sizeof__, __str__, __subclasshook__

Class Variables
	fields = `None` hash(x)

Properties
Inherited from `object`: `__class__`

Method Details

apply(self, session=None, **kwargs)

source code

Generate ArtifactResult instances.

Overrides: SourceType.apply: (inherited documentation)