acquire.acquire.dynamic.windows.named_objects

Module Contents

Classes

NamedObjectType	Generic enumeration.
NamedObject

class acquire.acquire.dynamic.windows.named_objects.NamedObjectType

Bases: enum.Enum

Generic enumeration.

Derive from this class to define new enumerations.

ALPC_PORT = 'ALPC Port'

CALLBACK = 'Callback'

DESKTOP = 'Desktop'

DEVICE = 'Device'

DIRECTORY = 'Directory'

DRIVER = 'Driver'

ETW_REGISTRATION = 'EtwRegistration'

EVENT = 'Event'

FILE = 'File'

FILTER_CONNECTION_PORT = 'FilterConnectionPort'

IO_COMPLETION = 'IoCompletion'

IR_TIMER = 'IRTimer'

JOB = 'Job'

KEY = 'Key'

KEYED_EVENT = 'KeyedEvent'

MUTANT = 'Mutant'

MUTEX = 'Mutex'

PARTITION = 'Partition'

PROCESS = 'Process'

SECTION = 'Section'

SESSION = 'Session'

SEMAPHORE = 'Semaphore'

SYMBOLIC_LINK = 'SymbolicLink'

TIMER = 'Timer'

THREAD = 'Thread'

TOKEN = 'Token'

TP_WORKER_FACTORY = 'TpWorkerFactory'

TYPE = 'Type'

WAIT_COMPLETION_PACKET = 'WaitCompletionPacket'

WINDOWS_STATION = 'WindowStation'

UNKNOWN = 'Unknown'

class acquire.acquire.dynamic.windows.named_objects.NamedObject(root: str, name: str, type_name: NamedObjectType)

__slots__ = ['name', 'root', 'type_name']

root

name

type_name

__repr__() → str

classmethod from_directory_information(root_name: str, directory_information: acquire.dynamic.windows.types.OBJECT_DIRECTORY_INFORMATION) → NamedObject