Saturday, June 22, 2013

Volatility 2.2 Class/Api Documentation


Learning how to create plugins for Volatility is forcing me to learn and understand object oriented programming in python which is great.  To help out I generated some documentation for the framework using pydoctor.

https://jamaal-re-tools.googlecode.com/git/voldocs/index.html



Note: 
Some items are missing from the generated documentation.  They are listed below.

volatility.scan.PoolScanner.object_offset
volatility.plugins.procdump.ProcExeDump.dump_pe
volatility.plugins.malware.idt.IDT.get_section_name
volatility.plugins.malware.malfind.MalwareEPROCESS.get_vads
volatility.plugins.malware.malfind.MalwareEPROCESS.search_process_memory
volatility.plugins.malware.malfind.VadYaraScanner.__init__
volatility.plugins.vadinfo.VADDump.dump_vad
volatility.plugins.gui.win32k_core._MM_SESSION_SPACE._section_chunks
volatility.plugins.gui.win32k_core._RTL_ATOM_TABLE.find_atom
volatility.plugins.gui.sessions.SessionsMixin.session_spaces
volatility.plugins.gui.sessions.SessionsMixin.find_session_space
volatility.obj.BaseObject.__nonzero__
volatility.plugins.overlays.windows.windows._UNICODE_STRING
volatility.plugins.overlays.windows.windows.WinTimeStamp.windows_to_unix_time
volatility.plugins.addrspaces.hibernate.WindowsHiberFileSpace32
volatility.plugins.registry.registryapi.RegistryApi.reg_get_currentcontrolset
volatility.cache
volatility.cache.CacheDecorator.__init__
volatility.conf
volatility.conf.ConfObject.add_option

No comments:

Post a Comment