volatility3.framework.constants package¶
Volatility 3 Constants.
Stores all the constant values that are generally fixed throughout volatility This includes default scanning block sizes, etc.
- AUTOMAGIC_CONFIG_PATH = 'automagic'¶
The root section within the context configuration for automagic values
- BANG = '!'¶
Constant used to delimit table names from type names when referring to a symbol
- CACHE_PATH = '/home/docs/.cache/volatility3'¶
Default path to store cached data
- ISF_EXTENSIONS = ['.json', '.json.xz', '.json.gz', '.json.bz2']¶
List of accepted extensions for ISF files
- ISF_MINIMUM_DEPRECATED = (3, 9, 9)¶
The highest version of the ISF that’s deprecated (usually higher than supported)
- ISF_MINIMUM_SUPPORTED = (2, 0, 0)¶
The minimum supported version of the Intermediate Symbol Format
- LINUX_BANNERS_PATH = '/home/docs/.cache/volatility3/linux_banners.cache'¶
“Default location to record information about available linux banners
- LOGLEVEL_V = 9¶
Logging level for a single -v
- LOGLEVEL_VV = 8¶
Logging level for -vv
- LOGLEVEL_VVV = 7¶
Logging level for -vvv
- LOGLEVEL_VVVV = 6¶
Logging level for -vvvv
- MAC_BANNERS_PATH = '/home/docs/.cache/volatility3/mac_banners.cache'¶
“Default location to record information about available mac banners
- OFFLINE = False¶
Whether to go online to retrieve missing/necessary JSON files
- PACKAGE_VERSION = '2.0.1'¶
The canonical version of the volatility3 package
- PARALLELISM = Parallelism.Off¶
Default value to the parallelism setting used throughout volatility
- PLUGINS_PATH = ['/home/docs/checkouts/readthedocs.org/user_builds/volatility3/checkouts/v2.0.1/volatility3/plugins', '/home/docs/checkouts/readthedocs.org/user_builds/volatility3/checkouts/v2.0.1/volatility3/framework/plugins']¶
Default list of paths to load plugins from (volatility3/plugins and volatility3/framework/plugins)
- class Parallelism(value)[source]¶
Bases:
enum.IntEnum
An enumeration listing the different types of parallelism applied to volatility.
- Multiprocessing = 2¶
- Off = 0¶
- Threading = 1¶
- ProgressCallback¶
Type information for ProgressCallback objects
- REMOTE_ISF_URL = None¶
Remote URL to query for a list of ISF addresses
- SYMBOL_BASEPATHS = ['/home/docs/checkouts/readthedocs.org/user_builds/volatility3/checkouts/v2.0.1/volatility3/symbols', '/home/docs/checkouts/readthedocs.org/user_builds/volatility3/checkouts/v2.0.1/volatility3/framework/symbols']¶
Default list of paths to load symbols from (volatility3/symbols and volatility3/framework/symbols)