本文整理匯總了Python中volatility.plugins.filescan.PoolScanDriver方法的典型用法代碼示例。如果您正苦於以下問題：Python filescan.PoolScanDriver方法的具體用法？Python filescan.PoolScanDriver怎麽用？Python filescan.PoolScanDriver使用的例子？那麽, 這裏精選的方法代碼示例或許可以為您提供幫助。您也可以進一步了解該方法所在類volatility.plugins.filescan的用法示例。
在下文中一共展示了filescan.PoolScanDriver方法的2個代碼示例，這些例子默認根據受歡迎程度排序。您可以為喜歡或者感覺有用的代碼點讚，您的評價將有助於係統推薦出更棒的Python代碼示例。
示例1: __init__
# 需要導入模塊: from volatility.plugins import filescan [as 別名]
# 或者: from volatility.plugins.filescan import PoolScanDriver [as 別名]
def __init__(self, config, *args, **kwargs):
common.AbstractScanCommand.__init__(self, config, *args, **kwargs)
self.scanners = [
filescan.PoolScanFile,
filescan.PoolScanDriver,
filescan.PoolScanSymlink,
filescan.PoolScanMutant,
filescan.PoolScanProcess,
modscan.PoolScanModule,
modscan.PoolScanThread,
atoms.PoolScanAtom,
windowstations.PoolScanWind,
] 示例2: find_i8042prt
# 需要導入模塊: from volatility.plugins import filescan [as 別名]
# 或者: from volatility.plugins.filescan import PoolScanDriver [as 別名]
def find_i8042prt(addrspace):
# Do a pool scan
for drv in poolscan.MultiScanInterface(addr_space=addrspace,
scanners=[filescan.PoolScanDriver],
scan_virtual=True).scan():
if 'i8042prt' in drv.DriverName.v():
return drv
return None
# A KeyboardClass device must be attached to the unnamed device that is the main i8042prt keyboard device