rekall :: plugins :: response :: windows_processes :: MEMORY_BASIC_INFORMATION_64 :: Class MEMORY_BASIC_INFORMATION_64

Class MEMORY_BASIC_INFORMATION_64

Class Variables
	_fields_ = `[("BaseAddress", wintypes.LARGE_INTEGER), ("Allocat...`

Class Variable Details

_fields_

Value:

[("BaseAddress", wintypes.LARGE_INTEGER), ("AllocationBase", wintypes.
LARGE_INTEGER), ("AllocationProtect", wintypes.DWORD), ("RegionSize", 
wintypes.LARGE_INTEGER), ("State", wintypes.DWORD), ("Protect", wintyp
es.DWORD), ("Type", wintypes.DWORD)]