volatility.cli.volshell package¶
-
class
VolShell
[source]¶ Bases:
volatility.cli.CommandLine
Program to allow interactive interaction with a memory image.
This allows a memory image to be examined through an interactive python terminal with all the volatility support calls available.
-
consume_file
(filedata)¶ Consumes a file as produced by a plugin.
-
populate_config
(context, configurables_list, args, plugin_config_path)¶ Populate the context config based on the returned args.
We have already determined these elements must be descended from ConfigurableInterface
- Parameters
context (
ContextInterface
) – The volatility context to operate onconfigurables_list (
Dict
[str
,ConfigurableInterface
]) – A dictionary of configurable items that can be configured on the pluginargs (
Namespace
) – An object containing the arguments necessaryplugin_config_path (
str
) – The path within the context’s config containing the plugin’s configuration
- Return type
None
-
populate_requirements_argparse
(parser, configurable)¶ Adds the plugin’s simple requirements to the provided parser.
- Parameters
parser (
Union
[ArgumentParser
,_ArgumentGroup
]) – The parser to add the plugin’s (simple) requirements toconfigurable (
Type
[ConfigurableInterface
]) – The plugin object to pull the requirements from
-
process_exceptions
(excp)¶ Provide useful feedback if an exception occurs.
-