rekall :: plugins :: response :: windows_processes :: LiveVad :: Class LiveVad
[frames] | no frames]

Class LiveVad

source code


Collect information about a VAD region.

This is the Live equivalent of _MMVAD.

Instance Methods
 
length(self) source code

Inherited from rekall_lib.utils.AttributeDict: Get, Set, __dir__, __getattr__, __setattr__

Inherited from dict: __cmp__, __contains__, __delitem__, __eq__, __ge__, __getattribute__, __getitem__, __gt__, __init__, __iter__, __le__, __len__, __lt__, __ne__, __new__, __repr__, __setitem__, __sizeof__, clear, copy, fromkeys, get, has_key, items, iteritems, iterkeys, itervalues, keys, pop, popitem, setdefault, update, values, viewitems, viewkeys, viewvalues

Inherited from object: __delattr__, __format__, __reduce__, __reduce_ex__, __str__, __subclasshook__

Class Variables

Inherited from rekall_lib.utils.AttributeDict: __metaclass__, dirty

Inherited from dict: __hash__

Properties

Inherited from object: __class__

Method Details

length(self)

source code 
Decorators:
  • @utils.safe_property