rekall :: plugins :: response :: windows :: WindowsFileInformation :: Class WindowsFileInformation

Class WindowsFileInformation

Instance Methods

__init__(self, session=None, filename=None, **kwargs)
x.__init__(...) initializes x; see help(type(x)) for signature (Inherited from rekall.plugins.response.common.FileInformation)

source code

list(self)
If this is a directory return a list of children. (Inherited from rekall.plugins.response.common.FileInformation)

source code

list_names(self) (Inherited from rekall.plugins.response.common.FileInformation)

source code

open(self) (Inherited from rekall.plugins.response.common.FileInformation)

source code

Inherited from rekall_lib.utils.SlottedObject: keys

Inherited from object: __delattr__, __format__, __getattribute__, __hash__, __new__, __reduce__, __reduce_ex__, __repr__, __setattr__, __sizeof__, __str__, __subclasshook__

Class Methods

from_stat(cls, filespec, session=None)

source code

Properties
	atime (Inherited from rekall.plugins.response.common.FileInformation)
	ctime (Inherited from rekall.plugins.response.common.FileInformation)
	filename (Inherited from rekall.plugins.response.common.FileInformation)
	mtime (Inherited from rekall.plugins.response.common.FileInformation)
	session (Inherited from rekall.plugins.response.common.FileInformation)
	st_atime (Inherited from rekall.plugins.response.common.FileInformation)
	st_ctime (Inherited from rekall.plugins.response.common.FileInformation)
	st_dev (Inherited from rekall.plugins.response.common.FileInformation)
	st_gid (Inherited from rekall.plugins.response.common.FileInformation)
	st_ino (Inherited from rekall.plugins.response.common.FileInformation)
	st_mode (Inherited from rekall.plugins.response.common.FileInformation)
	st_mtime (Inherited from rekall.plugins.response.common.FileInformation)
	st_nlink (Inherited from rekall.plugins.response.common.FileInformation)
	st_size (Inherited from rekall.plugins.response.common.FileInformation)
	st_uid (Inherited from rekall.plugins.response.common.FileInformation)
Inherited from `object`: `__class__`

Method Details

from_stat(cls, filespec, session=None)
Class Method

source code

Overrides: common.FileInformation.from_stat

Class WindowsFileInformation

from_stat(cls, filespec, session=None) Class Method

from_stat(cls, filespec, session=None)
Class Method