Windows process.
|
|
__init__(self,
pid=None,
tid=None,
process_name=None)
x.__init__(...) initializes x; see help(type(x)) for signature |
source code
|
|
|
|
get_system_info(self)
Get system information. |
source code
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
get_parent_pid(self)
Get the Parent Process ID. |
source code
|
|
|
|
|
|
|
_encode_args(self,
args)
Convert a list of arguments to a string that can be passed along on
the command-line. |
source code
|
|
|
|
is32bit(self,
pid=None,
process_name=None,
path=None)
Is a PE file 32-bit or does a process identifier belong to a 32-bit
process. |
source code
|
|
|
|
execute(self,
path,
args=None,
dll=None,
free=False,
curdir=None,
source=None,
mode=None,
maximize=False,
env=None,
trigger=None)
Execute sample process. |
source code
|
|
|
|
|
|
|
inject(self,
dll=None,
apc=False,
track=True,
mode=None)
Inject our monitor into the specified process. |
source code
|
|
|
|
drop_config(self,
track=True,
mode=None,
trigger=None)
Helper function to drop the configuration for a new process. |
source code
|
|
|
|
dump_memory(self,
addr=None,
length=None)
Dump process memory, optionally target only a certain memory range. |
source code
|
|
|
|
|
|
Inherited from object:
__delattr__,
__format__,
__getattribute__,
__hash__,
__new__,
__reduce__,
__reduce_ex__,
__repr__,
__setattr__,
__sizeof__,
__str__,
__subclasshook__
|