From 7cac1a98fdf686a1b49716e2bb038bc9a6909e4c Mon Sep 17 00:00:00 2001 From: Mike Auty Date: Wed, 13 Oct 2021 15:03:17 +0100 Subject: [PATCH] Core: Update documentation for RegExScanner --- volatility3/framework/layers/scanners/__init__.py | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/volatility3/framework/layers/scanners/__init__.py b/volatility3/framework/layers/scanners/__init__.py index 2c27c4fea..85c8390d9 100644 --- a/volatility3/framework/layers/scanners/__init__.py +++ b/volatility3/framework/layers/scanners/__init__.py @@ -30,6 +30,11 @@ class BytesScanner(layers.ScannerInterface): class RegExScanner(layers.ScannerInterface): + """A scanner that can be provided with a bytes-object regular expression pattern + The scanner will scqn all blocks for the regular expression and report the absolute offset of any finds + + The default flags include DOTALL, since the searches are through binary data and the newline character should + have no specific significance in such searches""" thread_safe = True _required_framework_version = (2, 0, 0)