volatility3.framework.constants package¶
Volatility 3 Constants.
Stores all the constant values that are generally fixed throughout volatility This includes default scanning block sizes, etc.
-
AUTOMAGIC_CONFIG_PATH
= 'automagic'¶ The root section within the context configuration for automagic values
-
BANG
= '!'¶ Constant used to delimit table names from type names when referring to a symbol
-
CACHE_PATH
= '/home/docs/.cache/volatility3'¶ Default path to store cached data
-
ISF_EXTENSIONS
= ['.json', '.json.xz', '.json.gz', '.json.bz2']¶ List of accepted extensions for ISF files
-
ISF_MINIMUM_DEPRECATED
= (3, 9, 9)¶ The highest version of the ISF that’s deprecated (usually higher than supported)
-
ISF_MINIMUM_SUPPORTED
= (2, 0, 0)¶ The minimum supported version of the Intermediate Symbol Format
-
LINUX_BANNERS_PATH
= '/home/docs/.cache/volatility3/linux_banners.cache'¶ “Default location to record information about available linux banners
-
LOGLEVEL_V
= 9¶ Logging level for a single -v
-
LOGLEVEL_VV
= 8¶ Logging level for -vv
-
LOGLEVEL_VVV
= 7¶ Logging level for -vvv
-
LOGLEVEL_VVVV
= 6¶ Logging level for -vvvv
-
MAC_BANNERS_PATH
= '/home/docs/.cache/volatility3/mac_banners.cache'¶ “Default location to record information about available mac banners
-
PACKAGE_VERSION
= '1.0.1'¶ The canonical version of the volatility3 package
-
PARALLELISM
= <Parallelism.Off: 0>¶ Default value to the parallelism setting used throughout volatility
-
PLUGINS_PATH
= ['/home/docs/checkouts/readthedocs.org/user_builds/volatility3/checkouts/v1.0.1/volatility3/plugins', '/home/docs/checkouts/readthedocs.org/user_builds/volatility3/checkouts/v1.0.1/volatility3/framework/plugins']¶ Default list of paths to load plugins from (volatility3/plugins and volatility3/framework/plugins)
-
class
Parallelism
(value)[source]¶ Bases:
enum.IntEnum
An enumeration listing the different types of parallelism applied to volatility.
-
Multiprocessing
= 2¶
-
Off
= 0¶
-
Threading
= 1¶
-
-
ProgressCallback
¶ Type information for ProgressCallback objects
alias of Optional[Callable[[float, str], None]]
-
SYMBOL_BASEPATHS
= ['/home/docs/checkouts/readthedocs.org/user_builds/volatility3/checkouts/v1.0.1/volatility3/symbols', '/home/docs/checkouts/readthedocs.org/user_builds/volatility3/checkouts/v1.0.1/volatility3/framework/symbols']¶ Default list of paths to load symbols from (volatility3/symbols and volatility3/framework/symbols)