Esempio n. 1
0
def reverse_cmdline(args):
    """ Reverse """
    from haystack.reverse import api as rapi
    # get the memory handler adequate for the type requested
    memory_handler = cli.get_memory_handler(args)
    # do the search
    rapi.reverse_instances(memory_handler)
    return
Esempio n. 2
0
def reverse_cmdline(args):
    """ Reverse """
    from haystack.reverse import api as rapi
    # get the memory handler adequate for the type requested
    memory_handler = _get_memory_handler(args)
    # do the search
    rapi.reverse_instances(memory_handler)
    return
Esempio n. 3
0
 def setUpClass(cls):
     cls.dumpname = zeus_856_svchost_exe.dumpname
     cls.memory_handler = dump_loader.load(zeus_856_svchost_exe.dumpname)
     cls.process_context = cls.memory_handler.get_reverse_context()
     cls.process_context.create_record_cache_folder()
     ##
     cls.offset = zeus_856_svchost_exe.known_records[0][0]
     cls._context = context.get_context_for_address(cls.memory_handler, cls.offset)
     api.reverse_instances(cls.memory_handler)
     return
Esempio n. 4
0
 def setUpClass(cls):
     cls.dumpname = zeus_856_svchost_exe.dumpname
     cls.memory_handler = folder.load(zeus_856_svchost_exe.dumpname)
     cls.process_context = cls.memory_handler.get_reverse_context()
     cls.process_context.create_record_cache_folder()
     ##
     cls.offset = zeus_856_svchost_exe.known_records[0][0]
     cls._context = context.get_context_for_address(cls.memory_handler,
                                                    cls.offset)
     api.reverse_instances(cls.memory_handler)
     return