volatility3.framework.symbols.metadata module¶

class LinuxMetadata(json_data)[source]¶

Bases: volatility3.framework.interfaces.symbols.MetadataInterface

Class to handle the etadata from a Linux symbol table.

Constructor that accepts json_data.

class WindowsMetadata(json_data)[source]¶

Bases: volatility3.framework.interfaces.symbols.MetadataInterface

Class to handle the metadata from a Windows symbol table.

Constructor that accepts json_data.

property pdb_age¶

Return type: Optional[int]

property pdb_guid¶

Return type: Optional[str]

property pe_version¶

Return type: Optional[Tuple]

property pe_version_string¶

Return type: Optional[str]