rekall :: plugins :: response :: windows :: WmiResult :: Class WmiResult
[frames] | no frames]

Class WmiResult

source code


Represent WMI result.

Instance Methods
new empty dictionary

__init__(self, result)
x.__init__(...) initializes x; see help(type(x)) for signature
source code

Inherited from rekall_lib.utils.AttributeDict: Get, Set, __dir__, __getattr__, __setattr__

Inherited from dict: __cmp__, __contains__, __delitem__, __eq__, __ge__, __getattribute__, __getitem__, __gt__, __iter__, __le__, __len__, __lt__, __ne__, __new__, __repr__, __setitem__, __sizeof__, clear, copy, fromkeys, get, has_key, items, iteritems, iterkeys, itervalues, keys, pop, popitem, setdefault, update, values, viewitems, viewkeys, viewvalues

Inherited from object: __delattr__, __format__, __reduce__, __reduce_ex__, __str__, __subclasshook__

Class Variables
  IGNORE_PROPS = ["CSCreationClassName", "CreationClassName", "O...

Inherited from rekall_lib.utils.AttributeDict: __metaclass__, dirty

Inherited from dict: __hash__

Properties

Inherited from object: __class__

Method Details

__init__(self, result)
(Constructor)

source code 

x.__init__(...) initializes x; see help(type(x)) for signature

Returns:
new empty dictionary

Overrides: object.__init__
(inherited documentation)

Class Variable Details

IGNORE_PROPS

Value:
["CSCreationClassName", "CreationClassName", "OSName", "OSCreationClas\
sName", "WindowsVersion", "CSName", "__NAMESPACE", "__SERVER", "__PATH\
"]