本文整理匯總了Python中volatility.plugins.filescan.DriverScan方法的典型用法代碼示例。如果您正苦於以下問題:Python filescan.DriverScan方法的具體用法?Python filescan.DriverScan怎麽用?Python filescan.DriverScan使用的例子?那麽, 這裏精選的方法代碼示例或許可以為您提供幫助。您也可以進一步了解該方法所在類volatility.plugins.filescan
的用法示例。
在下文中一共展示了filescan.DriverScan方法的2個代碼示例,這些例子默認根據受歡迎程度排序。您可以為喜歡或者感覺有用的代碼點讚,您的評價將有助於係統推薦出更棒的Python代碼示例。
示例1: calculate
# 需要導入模塊: from volatility.plugins import filescan [as 別名]
# 或者: from volatility.plugins.filescan import DriverScan [as 別名]
def calculate(self):
addr_space = utils.load_as(self._config)
self.apply_types(addr_space, self._config.VERSION)
scanner = filescan.DriverScan(self._config)
for driver in scanner.calculate():
drivername = str(driver.DriverName or '')
if drivername.endswith("truecrypt"):
for device in driver.devices():
code = device.DeviceType.v()
type = devicetree.DEVICE_CODES.get(code)
if type == 'FILE_DEVICE_DISK':
yield device
示例2: __init__
# 需要導入模塊: from volatility.plugins import filescan [as 別名]
# 或者: from volatility.plugins.filescan import DriverScan [as 別名]
def __init__(self, config, *args, **kwargs):
filescan.DriverScan.__init__(self, config, *args, **kwargs)
config.add_option("REGEX", short_option = 'r', type = 'str',
action = 'store',
help = 'Analyze drivers matching REGEX')