volatility3.framework.renderers.conversion module
- convert_network_four_tuple(family, four_tuple)[source]
Converts the connection four_tuple:
(source ip, source port, dest ip, dest port)
into their string equivalents. IP addresses are expected as a tuple of unsigned shorts. Ports are converted to proper endianness as well.
- windows_bytes_to_guid(buf)[source]
Converts 16 raw bytes to a windows GUID.
Raises ValueError if the provided buffer is not exactly 16 bytes.
- Return type: