volatility3.framework.symbols.metadata module

class LinuxMetadata(json_data)[source]

Bases: MetadataInterface

Class to handle the metadata from a Linux symbol table.

Constructor that accepts json_data.

class WindowsMetadata(json_data)[source]

Bases: MetadataInterface

Class to handle the metadata from a Windows symbol table.

Constructor that accepts json_data.

property pdb_age: Optional[int]
property pdb_guid: Optional[str]
property pe_version: Optional[Union[Tuple[int, int, int], Tuple[int, int, int, int]]]
property pe_version_string: Optional[str]