volatility3.schemas package

create_json_hash(input, schema=None)

Constructs the hash of the input and schema to create a unique identifier for a particular JSON file.

Return type:

Optional[str]

dwarf2json_check_rust_type_confusion(input, dwarf2json_version)

dwarf2json sanity check for Rust and C types confusion:

• dwarf2json #63

• volatility3 #1305

Parameters:

dwarf2json_version (Tuple[int]) – a tuple containing each version identifier

Return type:

bool

Returns:

True if the issue was detected

load_cached_validations()

Loads up the list of successfully cached json objects, so we don’t need to revalidate them.

Return type:

Set[str]

parse_producer_version(version_string)

Parses a producer version and returns a tuple of identifiers.

Parameters:

version_string (str) – string containing dot-separated integers,

expected to follow the Volatility3 versioning schema

Return type:

Optional[Tuple[int]]

Returns:

A tuple containing each version identifier

record_cached_validations(validations)

Record the cached validations, so we don’t need to revalidate them in future.

Return type:

None

valid(input, schema, use_cache=True)

Validates a json schema.

Return type:

bool

validate(input, use_cache=True)

Validates an input JSON file based upon.

Return type:

bool