Package rekall :: Package plugins :: Package tools :: Module profile_tool_test :: Class BuildIndexTester

Class BuildIndexTester

Nested Classes
	__metaclass__ Automatic Plugin Registration through metaclasses. (Inherited from rekall.plugin.Command)
	top_level_class A command can be run from the rekall command line. (Inherited from rekall.plugin.Command)

Instance Methods

__init__(self, profiles=None, **kwargs)
The constructor for this command.

source code

BuildDataIndex(self, spec)
Builds a data index from the specification. (Inherited from rekall.plugins.tools.profile_tool.BuildIndex)

source code

BuildStructIndex(self, spec)
Builds a Struct index from specification. (Inherited from rekall.plugins.tools.profile_tool.BuildIndex)

source code

BuildSymbolsIndex(self, spec)
Builds an index to identify profiles based on their symbols-offsets. (Inherited from rekall.plugins.tools.profile_tool.BuildIndex)

source code

ValidateDataIndex(self, index)
Check the index for collisions. (Inherited from rekall.plugins.tools.profile_tool.BuildIndex)

source code

__iter__(self)
Make plugins that define collect iterable, as convenience. (Inherited from rekall.plugin.Command)

source code

__repr__(self)
repr(x) (Inherited from rekall.plugin.Command)

source code

__str__(self)
Render into a string using the text renderer. (Inherited from rekall.plugin.Command)

source code

build_index(self, spec) (Inherited from rekall.plugins.tools.profile_tool.BuildIndex)

source code

get_plugin(self, name, **kwargs)
Returns an instance of the named plugin. (Inherited from rekall.plugin.Command)

source code

render(self, renderer)
Produce results on the renderer given. (Inherited from rekall.plugins.tools.profile_tool.BuildIndex)

source code

Inherited from object: __delattr__, __format__, __getattribute__, __hash__, __new__, __reduce__, __reduce_ex__, __setattr__, __sizeof__, __subclasshook__

Class Methods

GetActiveClasses(cls, session)
Return only the active commands based on config. (Inherited from rekall.plugin.Command)

source code

GetPrototype(cls, session)
Return an instance of this plugin with suitable default arguments. (Inherited from rekall.plugin.Command)

source code

ImplementationByClass(self, name)

source code

ImplementationByName(self, name)

source code

args(cls, parser)
Declare the command line args this plugin needs. (Inherited from rekall.plugins.tools.profile_tool.BuildIndex)

source code

is_active(cls, session)
Checks we are active. (Inherited from rekall.plugin.ModeBasedActiveMixin)

source code

Class Variables
	classes = `{'AFF4Acquire': <class 'rekall.plugins.tools.aff4acq...` (Inherited from rekall.plugin.Command)
	classes_by_name = `{None: [<class 'rekall.plugins.tools.ipython...` (Inherited from rekall.plugin.Command)
	error_status = `None` hash(x) (Inherited from rekall.plugin.Command)
	interactive = `False` (Inherited from rekall.plugin.Command)
	mode = `None` hash(x) (Inherited from rekall.plugin.Command)
	plugin_feature = `'Command'` (Inherited from rekall.plugin.Command)
	producer = `False` (Inherited from rekall.plugin.Command)

Properties
	name (Inherited from rekall.plugin.Command)
Inherited from `object`: `__class__`

Method Details

init(self, profiles=None, **kwargs)
(Constructor)

source code

The constructor for this command.

Commands can take arbitrary named args and have access to the running
session.

Args:
  session: The session we will use. Many options are taken from the
    session by default, if not provided. This allows users to omit
    specifying many options.

  ignore_required: If this is true plugin constructors must allow the
    plugin to be instantiated with no parameters. All parameter
    validation shall be disabled and construction must succeed.

Overrides: object.__init__: (inherited documentation)

ImplementationByClass(self, name)
Class Method

source code

Overrides: plugin.Command.ImplementationByClass

ImplementationByName(self, name)
Class Method

source code

Overrides: plugin.Command.ImplementationByName

Class BuildIndexTester

__init__(self, profiles=None, **kwargs) (Constructor)

ImplementationByClass(self, name) Class Method

ImplementationByName(self, name) Class Method

init(self, profiles=None, **kwargs)
(Constructor)

ImplementationByClass(self, name)
Class Method

ImplementationByName(self, name)
Class Method