Types & classes — github.com/csababarta/volatility_plugins

CodeHub MCPcopy Create free account

hub / github.com/csababarta/volatility_plugins / types & classes

Types & classes23 in github.com/csababarta/volatility_plugins

⨍ Functions 106◇ Types & classes 23

↓ 1 callersClassINDXScanner

↓ 1 callersClassRCRDScanner

↓ 1 callersClassUSNScanner

ClassFILENAME_ALLOCATION

ClassFILE_REFERENCE

Scans for and parses potential INDX entries

ClassINDXRegExCheck

Checks for multiple strings per page

ClassINDX_ENTRY_HEADER

ClassINDX_HEADER

ClassINDX_STRUCT

Scans for and parses potential $Logfile entries

ClassLOGFILE_STRUCT

ClassLSN_RECORD_HEADER

ClassRCRDRegExCheck

Checks for multiple strings per page

ClassRCRD_HEADER

ClassRegExCheck

Checks for multiple strings per page

Scans for and parses potential USNJRNL entries

ClassUSN_RECORD

ClassUSN_RECORD_V2

Scans memory for driver objects and compares the results with the baseline image

baseline.py:439

Classmalprocfind

Finds malicious processes based on discrepancies from observed, normal behavior and properties

malprocfind.py:1044

Scans memory for processes and loaded DLLs and compares the results with the baseline

Scans memory for service objects and compares the results with the baseline image

baseline.py:842