Package modules :: Package packages :: Module ps1 :: Class PS1
[hide private]
[frames] | no frames]

Class PS1

source code

                  object --+    
                           |    
lib.common.abstracts.Package --+
                               |
                              PS1

PowerShell analysis package.

Instance Methods [hide private]
 
start(self, path)
Run analysis package.
source code

Inherited from lib.common.abstracts.Package: __init__, check, enum_paths, execute, finish, get_path, get_path_glob, init_regkeys, move_curdir, package_files, set_pids

Inherited from object: __delattr__, __format__, __getattribute__, __hash__, __new__, __reduce__, __reduce_ex__, __repr__, __setattr__, __sizeof__, __str__, __subclasshook__

Class Variables [hide private]
  PATHS = [("System32", "WindowsPowerShell", "v1.0", "powershell...

Inherited from lib.common.abstracts.Package: REGKEYS

Properties [hide private]

Inherited from object: __class__

Method Details [hide private]

start(self, path)

source code 

Run analysis package.

Raises:
  • NotImplementedError - this method is abstract.
Overrides: lib.common.abstracts.Package.start
(inherited documentation)

Class Variable Details [hide private]

PATHS

Value:
[("System32", "WindowsPowerShell", "v1.0", "powershell.exe"), ("System\
32", "WindowsPowerShell", "v2.0", "powershell.exe"), ("System32", "Win\
dowsPowerShell", "v3.0", "powershell.exe"),]