volatility3.framework.symbols.linux.utilities.modules module

class Modules(*args, **kwargs)[source]

Kernel modules related utilities.

classmethod lookup_module_address(context, kernel_module_name, handlers, target_address)[source]

Searches between the start and end address of the kernel module using target_address. Returns the module and symbol name of the address provided.

classmethod mask_mods_list(context, layer_name, mods)[source]

A helper function to mask the starting and end address of kernel modules