Files
volatility3/volatility/framework/interfaces/context.py
T

68 lines
1.8 KiB
Python

"""
Created on 6 May 2013
@author: mike
"""
from abc import ABCMeta, abstractmethod, abstractproperty
class ContextInterface(object, metaclass = ABCMeta):
"""All context-like objects must adhere to the following interface.
This interface is present to avoid import dependency cycles.
"""
def __init__(self):
"""Initializes the context with a symbol_space"""
# ## Symbol Space Functions
@abstractproperty
def config(self):
"""Returns the configuration object for this context"""
@abstractproperty
def symbol_space(self):
"""Returns the symbol_space for the context"""
# ## Memory Functions
@abstractproperty
def memory(self):
"""Returns the memory object for the context"""
raise NotImplementedError("Memory has not been implemented.")
def add_layer(self, layer):
"""Adds a named translation layer to the context memory"""
self.memory.add_layer(layer)
# ## Object Factory Functions
@abstractmethod
def object(self, symbol, layer_name, offset):
"""Object factory, takes a context, symbol, offset and optional layer_name
Looks up the layer_name in the context, finds the object template based on the symbol,
and constructs an object using the object template on the layer at the offset.
Returns a fully constructed object
"""
class ContextModifierInterface(object, metaclass = ABCMeta):
def __init__(self, namespace):
self.namespace = namespace
def config_get(self, context):
return context.config[self.namespace]
@classmethod
@abstractmethod
def requirements(cls):
"""Returns all the options that might need to be passed to modify the context"""
return []
@abstractmethod
def __call__(self, context):
"""Modifies the context in place"""