Trees       Indices       Help   
Rekall Memory Forensics
Package rekall :: Module session :: Class InteractiveSession
[frames] | no frames]

Class InteractiveSession

source code

The session allows for storing of arbitrary values and configuration.

This session contains a lot of convenience features which are useful for interactive use.

Nested Classes
  __metaclass__
Automatic Plugin Registration through metaclasses. (Inherited from rekall.session.Session)
  top_level_class
Base session. (Inherited from rekall.session.Session)
Instance Methods
 
__init__(self, env=None, use_config_file=True, **kwargs)
Creates an interactive session.		 source code
 
find_session(self, session_id) source code
 
v(self)
Re-execute the previous command.		 source code
 
lister(self, arg) source code
 
__str__(self)
str(x)		 source code
 
__unicode__(self) source code
 
__dir__(self) source code
 
add_session(self, **kwargs)
Creates a new session and adds it to the list.		 source code
 
Flush(self)
Destroy this session. (Inherited from rekall.session.Session)		 source code
 
GetParameter(self, item, default=<None Object>, cached=True)
Retrieves a stored parameter. (Inherited from rekall.session.Session)		 source code
 
GetRenderer(self, output=None)
Get a renderer for this session. (Inherited from rekall.session.Session)		 source code
 
HasParameter(self, item)
Returns if the session has the specified parameter set. (Inherited from rekall.session.Session)		 source code
 
LoadProfile(self, name, use_cache=True)
Try to load a profile directly by its name. (Inherited from rekall.session.Session)		 source code
 
Reset(self) (Inherited from rekall.session.Session) source code
 
RunPlugin(self, plugin_obj, *args, **kwargs)
Launch a plugin and its render() method automatically. (Inherited from rekall.session.Session)		 source code
 
SetCache(self, item, value, volatile=True)
Store something in the cache. (Inherited from rekall.session.Session)		 source code
 
SetParameter(self, item, value)
Sets a session parameter. (Inherited from rekall.session.Session)		 source code
 
__enter__(self) (Inherited from rekall.session.Session) source code
 
__exit__(self, exc_type, exc_value, trace) (Inherited from rekall.session.Session) source code
 
__getattr__(self, attr)
This will only get called if the attribute does not exist. (Inherited from rekall.session.Session)		 source code
 
clone(self, **kwargs) (Inherited from rekall.session.Session) source code
 
register_flush_hook(self, owner, hook, args=())
This hook will run when the session is closed. (Inherited from rekall.session.Session)		 source code
 
remove_flush_hook(self, owner)
Removes the flush hooks set by the owner. (Inherited from rekall.session.Session)		 source code
 
report_progress(self, message=' %(spinner)s', *args, **kwargs)
Called by the library to report back on the progress. (Inherited from rekall.session.Session)		 source code

Inherited from object: __delattr__, __format__, __getattribute__, __hash__, __new__, __reduce__, __reduce_ex__, __repr__, __setattr__, __sizeof__, __subclasshook__

Class Methods
 
ImplementationByClass(self, name) source code
 
ImplementationByName(self, name) source code
Class Variables
  session_list = []
  SERIALIZABLE_STATE_PARAMETERS = [('ept', u'IntParser'), ('prof... (Inherited from rekall.session.Session)
  classes = {'InteractiveSession': <class 'rekall.session.Intera... (Inherited from rekall.session.Session)
  classes_by_name = {None: [<class 'rekall.session.Session'>, <c... (Inherited from rekall.session.Session)
  plugin_feature = 'Session' (Inherited from rekall.session.Session)
  privileged = False (Inherited from rekall.session.Session)
Properties
  session_id
  address_resolver
A convenience accessor for the address resolver implementation. (Inherited from rekall.session.Session)
  default_address_space (Inherited from rekall.session.Session)
  logging (Inherited from rekall.session.Session)
  physical_address_space (Inherited from rekall.session.Session)
  profile (Inherited from rekall.session.Session)
  repository_managers
The IO managers that are used to fetch profiles from the profile repository. (Inherited from rekall.session.Session)
  volatile (Inherited from rekall.session.Session)

Inherited from object: __class__

Method Details

__init__(self, env=None, use_config_file=True, **kwargs)
(Constructor)

source code  
Creates an interactive session.

Args:
  env: If passed we use this dict as the local environment.

  use_config_file: If True we merge the system's config file into the
     session. This helps set the correct profile paths for example.

  kwargs: Arbitrary parameters to store in the session.

Returns:
  an interactive session object.
Overrides: object.__init__

__str__(self)
(Informal representation operator)

source code 

str(x)

Overrides: object.__str__
(inherited documentation)

__unicode__(self)

source code 
Overrides: Session.__unicode__

add_session(self, **kwargs)

source code  
Creates a new session and adds it to the list.

Returns:
  the new session.

ImplementationByClass(self, name)
Class Method

source code 
Overrides: Session.ImplementationByClass

ImplementationByName(self, name)
Class Method

source code 
Overrides: Session.ImplementationByName

Property Details

session_id

Get Method:
unreachable.session_id(self)

   Trees       Indices       Help   
Rekall Memory Forensics
Generated by Epydoc 3.0.1 on Mon Oct 9 03:29:27 2017 http://epydoc.sourceforge.net