What is _ADDRESS_OBJECT?
by Jun Koi
Hi,
I am working to make Volatility work for Vista. In file vtypes.py,
there is something named "_ADDRESS_OBJECT". I cannot find it structure
using Windbg, like I can do with other data structs (such as
_EPROCESS).
So where can I find information about _ADDRESS_OBJECT, with Windbg, or
any other tool?
Thanks a lot,
Jun
15 years, 7 months
- 2
- 1