Package rekall :: Package plugins :: Package windows :: Package registry :: Module evtlogs :: Class EVTObjectTypes

Class EVTObjectTypes

An implementation for parsing event logs.

Instance Methods
Inherited from `object`: `__delattr__`, `__format__`, `__getattribute__`, `__hash__`, `__init__`, `__reduce__`, `__reduce_ex__`, `__repr__`, `__setattr__`, `__sizeof__`, `__str__`, `__subclasshook__`

Class Methods

modify(cls, profile)
This class should modify the profile appropritately.

source code

Static Methods

a new object with type S, a subtype of T

__new__(cls, profile) (Inherited from rekall.obj.ProfileModification)

source code

Properties
Inherited from `object`: `__class__`

Method Details

modify(cls, profile)
Class Method

source code

This class should modify the profile appropritately.

The profile will be a copy of the original profile and will be returned
to the class caller.

Args:
   A profile to be modified.

Overrides: obj.ProfileModification.modify: (inherited documentation)

Class EVTObjectTypes

modify(cls, profile) Class Method

modify(cls, profile)
Class Method