volatility3.cli.volshell package¶
-
class
VolShell
[source]¶ Bases:
volatility3.cli.CommandLine
Program to allow interactive interaction with a memory image.
This allows a memory image to be examined through an interactive python terminal with all the volatility support calls available.
-
CLI_NAME
= 'volshell'¶
-
file_handler_class_factory
(direct=True)¶
-
populate_config
(context, configurables_list, args, plugin_config_path)¶ Populate the context config based on the returned args.
We have already determined these elements must be descended from ConfigurableInterface
- Parameters
context (
ContextInterface
) – The volatility3 context to operate onconfigurables_list (
Dict
[str
,Type
[ConfigurableInterface
]]) – A dictionary of configurable items that can be configured on the pluginargs (
Namespace
) – An object containing the arguments necessaryplugin_config_path (
str
) – The path within the context’s config containing the plugin’s configuration
- Return type
-
populate_requirements_argparse
(parser, configurable)¶ Adds the plugin’s simple requirements to the provided parser.
- Parameters
parser (
Union
[ArgumentParser
,_ArgumentGroup
]) – The parser to add the plugin’s (simple) requirements toconfigurable (
Type
[ConfigurableInterface
]) – The plugin object to pull the requirements from
-
process_exceptions
(excp)¶ Provide useful feedback if an exception occurs during a run of a plugin.
-
process_unsatisfied_exceptions
(excp)¶ Provide useful feedback if an exception occurs during requirement fulfillment.
-
run
()[source]¶ Executes the command line module, taking the system arguments, determining the plugin to run and then running it.
-
classmethod
setup_logging
()¶
-