Files
volatility3/volatility/framework/symbols/mac/__init__.py
T

16 lines
674 B
Python

from volatility.framework import interfaces
from volatility.framework.symbols import intermed
from volatility.framework.symbols.mac import extensions
class MacKernelIntermedSymbols(intermed.IntermediateSymbolTable):
provides = {"type": "interface"}
def __init__(self, context: interfaces.context.ContextInterface, config_path: str, name: str,
isf_url: str) -> None:
super().__init__(context = context, config_path = config_path, name = name, isf_url = isf_url)
self.set_type_class('proc', extensions.proc)
# self.set_type_class('fileglob', extensions.fileglob)
# self.set_type_class('vnode', extensions.vnode)