Windows process.
|
__init__(self,
pid=None,
tid=None,
process_name=None)
x.__init__(...) initializes x; see help(type(x)) for signature |
source code
|
|
|
get_system_info(self)
Get system information. |
source code
|
|
|
|
|
|
|
|
|
|
|
|
|
get_parent_pid(self)
Get the Parent Process ID. |
source code
|
|
|
|
|
_encode_args(self,
args)
Convert a list of arguments to a string that can be passed along on
the command-line. |
source code
|
|
|
is32bit(self,
pid=None,
process_name=None,
path=None)
Is a PE file 32-bit or does a process identifier belong to a 32-bit
process. |
source code
|
|
|
execute(self,
path,
args=None,
dll=None,
free=False,
curdir=None,
source=None,
mode=None,
maximize=False,
env=None,
trigger=None)
Execute sample process. |
source code
|
|
|
|
|
inject(self,
dll=None,
apc=False,
track=True,
mode=None)
Inject our monitor into the specified process. |
source code
|
|
|
drop_config(self,
track=True,
mode=None,
trigger=None)
Helper function to drop the configuration for a new process. |
source code
|
|
|
dump_memory(self,
addr=None,
length=None)
Dump process memory, optionally target only a certain memory range. |
source code
|
|
|
|
Inherited from object :
__delattr__ ,
__format__ ,
__getattribute__ ,
__hash__ ,
__new__ ,
__reduce__ ,
__reduce_ex__ ,
__repr__ ,
__setattr__ ,
__sizeof__ ,
__str__ ,
__subclasshook__
|