Index

_

__init__() (AlgorithmRegistry method) (AlgorithmResult method) (AlignedSegment method) (AlignmentReport method) (AnalysisContext method) (AnalysisPipeline method) (ComparisonRegion method) (ConnectionTableEntry method) (ConsensusVector method) (CryptoSecret method) (DumpFile method) (DumpIngestor method) (ExtensionBlock method) (HandleTableEntry method) (ImportResult method) (KDFParams method) (KDFRegistry method) (KeyOccurrence method) (Match method) (MetadataStore method) (ModuleEntrySpec method) (MslEncryptionConfig method) (MslReader method) (MslWriter method) (Oracle method) (PhaseMapping method) (ProcessTableEntry method) (RegionSpec method) (RunDirectory method) (RunningTopK method) (StreamedRegionSpec method) (WelfordVariance method) (WindowProjection method)

__new__() (ArchType method) (BlockFlag method) (BlockType method) (ByteClass method), [1] (CapturedRun static method) (CapturedRunIndex static method) (CompAlgo method) (Confidence method) (ConnRowType method) (EdgeKind method) (EncAlgo method) (Endianness method) (HandleType method) (HashAlgo method) (HeaderFlag method) (KdfType method) (KeyEncap method) (KeyState method) (MslKeyType method) (MslProtocol method) (NodeKind method) (OSType method) (PageState method) (Protection method) (RegionType method) (SourceFormat method) (ThreadState method) (VarianceThresholds static method), [1] (VasNameSource method)

A

ACTIVE (KeyState attribute) add_capabilities() (MslWriter method) add_connection_table() (MslWriter method) add_connectivity_table() (MslWriter method) add_dump() (WelfordVariance method) add_end_of_capture() (MslWriter method) add_extension_segment() (MslWriter method) add_handle_table() (MslWriter method) add_import_provenance() (MslWriter method) add_key_hint() (MslWriter method) add_memory_region() (MslWriter method) add_memory_region_source() (MslWriter method) add_module_list_index() (MslWriter method) add_pointer_graph() (MslWriter method) add_process_identity() (MslWriter method) add_process_table() (MslWriter method) add_raw_appendix() (MslWriter method) add_raw_block() (MslWriter method) add_related_dump() (MslWriter method) add_run() (MetadataStore method) add_slab() (RunningTopK method) add_source() (ConsensusVector method) add_system_context() (MslWriter method) add_thread_context() (MslWriter method) add_vas_map() (MslWriter method) ADDRESS (NodeKind attribute) AES_256_GCM (EncAlgo attribute) ALGORITHM_ENTRY_POINT_GROUP (in module algorithms.registry) algorithm_name (AlgorithmResult attribute) AlgorithmRegistry (class in algorithms.registry) AlgorithmResult (class in algorithms.base) algorithms.base module

algorithms.registry module AlignedSegment (class in engine.consensus) AlignmentReport (class in engine.consensus) AnalysisContext (class in algorithms.base) AnalysisPipeline (class in engine.pipeline) analyze_library() (AnalysisPipeline method) (in module app.tools) anchor_distinctiveness() (PatternGenerator static method) anchor_index (WindowProjection attribute) ANDROID (OSType attribute) ANONYMOUS (RegionType attribute) app.tools module APP_TRAFFIC_SECRET (MslKeyType attribute) architect.json_exporter module architect.pattern_generator module architect.volatility3_exporter module architect.yara_exporter module ArchType (class in msl.enums) ARGON2ID (KdfType attribute) ARM32 (ArchType attribute) ARM64 (ArchType attribute) ARP_ENTRY (ConnRowType attribute) assert_oracle_not_hostile() (in module engine.oracle) avail (CapturedRun attribute) available_canonical_phases() (PhaseNormalizer method) available_phases() (RunDirectory method)

B

base (RegionSpec attribute) (StreamedRegionSpec attribute) base_addr (ModuleEntrySpec attribute) BaseAlgorithm (class in algorithms.base) BaseKDF (class in core.kdf_base) BIG (Endianness attribute) BLAKE3 (HashAlgo attribute) block (CapturedRun attribute) block_type (ExtensionBlock attribute) block_uuid (ExtensionBlock attribute) BlockFlag (class in msl.enums) BlockType (class in msl.enums)

buf_offset (CapturedRun attribute) buffer_length (MslReader property) build() (ConsensusVector method) build_from_sources() (ConsensusVector method) build_import_provenance_payload() (in module msl.writer) build_incremental() (ConsensusVector method) by_va (CapturedRunIndex attribute) byte_histogram() (in module core.entropy) ByteClass (class in core.variance) (class in engine.consensus) bytes_compared (AlignmentReport attribute) bytes_discarded (AlignmentReport attribute)

C

CALL (EdgeKind attribute) canonical_or_raw (DumpFile property) canonical_phase (DumpFile attribute) (PhaseMapping attribute) CapBit (class in msl.writer) capture_path (RunDirectory attribute) capture_status (RunDirectory attribute) CAPTURED (PageState attribute) captured_run_index() (MslReader method) CapturedRun (class in msl.reader) CapturedRunIndex (class in msl.reader) class_mask() (in module core.variance) class_window_va() (ConsensusVector method) classes (WindowProjection attribute) classification_counts() (ConsensusVector method) classifications (ConsensusVector property) classify_variance() (in module core.variance) CLEANUP_NAMES (PhaseNormalizer attribute) client_random (CryptoSecret property) close() (MslReader method) cmd_line (ProcessTableEntry attribute) collect_connections() (MslReader method) collect_connectivity_tables() (MslReader method) collect_end_of_capture() (MslReader method) collect_end_of_extension() (MslReader method) collect_environment_blocks() (MslReader method) collect_extension_vas_maps() (MslReader method) collect_file_descriptors() (MslReader method) collect_handles() (MslReader method) collect_import_provenance() (MslReader method) collect_key_hints() (MslReader method) collect_module_list_index() (MslReader method) collect_modules() (MslReader method) collect_network_connections() (MslReader method) collect_pointer_graphs() (MslReader method) collect_process_identity() (MslReader method) collect_processes() (MslReader method) collect_regions() (MslReader method) collect_related_dumps() (MslReader method) collect_security_tokens() (MslReader method) collect_system_context() (MslReader method) collect_thread_contexts() (MslReader method) collect_vas_map() (MslReader method) COMP_LZ4 (BlockFlag attribute)

COMP_ZSTD (BlockFlag attribute) CompAlgo (class in msl.enums) ComparisonRegion (class in core.models) COMPRESSED (BlockFlag attribute) compute_entropy_profile() (in module core.entropy) compute_variance() (in module core.variance) confidence (AlgorithmResult attribute) Confidence (class in msl.enums) confidence (Match attribute) CONFIRMED (Confidence attribute) CONNECTION_TABLE (BlockType attribute) (TableBit attribute) ConnectionTableEntry (class in msl.writer) CONNECTIVITY_TABLE (BlockType attribute) ConnRowType (class in msl.enums) ConsensusMatrix (in module engine.consensus) ConsensusVector (class in engine.consensus) context (KDFParams attribute) context_after (KeyOccurrence attribute) context_before (KeyOccurrence attribute) context_size (ComparisonRegion attribute) context_start_offset (KeyOccurrence property) CONTINUATION (BlockFlag attribute) core.entropy module core.kdf module core.kdf_base module core.kdf_registry module core.models module core.phase_normalizer module core.variance module CORRUPTED (TagStatus attribute) count_classifications() (in module core.variance) count_regions() (ConsensusVector method) covered (WindowProjection property) COW (Protection attribute) CRYPTO_HINTS (CapBit attribute) CryptoSecret (class in core.models)

D

data (Match attribute) (RegionSpec attribute) data_len (RegionSpec property) (StreamedRegionSpec property) dataset_info (DumpIngestor property) decompressed_payload() (MslReader method) decrypted_output (ImportResult attribute) default_entropy_threshold() (in module core.entropy) DEFAULT_ENTROPY_WINDOW (in module core.entropy) deprecated_kwarg() (in module core.models) derive() (BaseKDF method) derive_key_block() (TLS12PRF static method) derive_master_secret() (TLS12PRF static method) derive_secret() (TLS13HKDF static method) description (BaseAlgorithm attribute)

diagnostic_dicts (AlignmentReport property) diagnostics (AlignmentReport attribute) DIR (HandleType attribute) discover() (AlgorithmRegistry method) (KDFRegistry method) disk_hash (ModuleEntrySpec attribute) dropped_key_hints (ImportResult attribute) DTLS_12 (MslProtocol attribute) DTLS_13 (MslProtocol attribute) dump_file (PhaseMapping attribute) dump_index_for_path() (ConsensusVector method) dump_uuid (MslWriter property) DumpFile (class in core.models) DumpIngestor (class in harvester.ingestor) dumps (RunDirectory attribute)

E

ECDH_PRIVATE_KEY (MslKeyType attribute) EdgeKind (class in msl.enums) effective_vas_map() (MslReader method) ELF_CORE (SourceFormat attribute) enc_algo (MslEncryptionConfig attribute) EncAlgo (class in msl.enums) ENCRYPTED (HeaderFlag attribute) END_OF_CAPTURE (BlockType attribute) END_OF_EXTENSION (BlockType attribute) Endianness (class in msl.enums) engine.consensus module engine.oracle module engine.pipeline module entropy_from_byte_counts() (in module core.entropy) entropy_from_freq() (in module core.entropy)

entropy_from_freq_batch() (in module core.entropy) entropy_term_lut() (in module core.entropy) ENVIRONMENT_BLOCK (BlockType attribute) ENVIRONMENT_VARS (CapBit attribute) ESP_AH_KEY (MslKeyType attribute) estimate_working_set() (BaseAlgorithm method) excluded_bytes (ImportResult attribute) excluded_region_count (ImportResult attribute) exe_name (ProcessTableEntry attribute) EXECUTE (Protection attribute) expand_traffic_secret() (BaseKDF method) EXPIRED (KeyState attribute) export() (JsonExporter static method) (Volatility3Exporter static method) (YaraExporter static method) extension_segment_count (MslWriter property) ExtensionBlock (class in msl.writer) extra (AnalysisContext attribute) (KDFParams attribute)

F

FAILED (PageState attribute) family (ConnectionTableEntry attribute) fd (HandleTableEntry attribute) FILE (HandleType attribute) FILE_DESCRIPTOR (BlockType attribute) FILE_DESCRIPTORS (CapBit attribute) file_header (MslReader property) filter_by() (MetadataStore method) finalize() (ConsensusVector method)

find_anchors() (PatternGenerator static method) find_contiguous_runs() (in module core.variance) find_high_entropy_regions() (in module core.entropy) find_sidecar() (SidecarParser static method) FIND_WINDOW (in module msl.reader) flags (ExtensionBlock attribute) flat_alignment_report() (in module engine.consensus) FREEBSD (OSType attribute) from_state() (WelfordVariance class method) full_phase (DumpFile property)

G

gaps (WindowProjection attribute) generate() (PatternGenerator static method) get() (AlgorithmRegistry method) (KDFRegistry method) get_aligned_candidates() (ConsensusVector method) get_canonical_display() (PhaseNormalizer static method) get_dump_for_phase() (RunDirectory method) get_dump_paths_for_phase() (DumpIngestor method) get_for_protocol() (KDFRegistry method)

get_kdf_registry() (in module core.kdf_registry) get_live_variance() (ConsensusVector method) get_region_filter() (in module app.tools) get_regions() (ConsensusVector method) get_registry() (in module algorithms.registry) get_runs_for_library() (MetadataStore method) get_static_regions() (ConsensusVector method) get_volatile_regions() (ConsensusVector method) GUARD (Protection attribute)

H

HALTED (ThreadState attribute) HANDLE_TABLE (BlockType attribute) (TableBit attribute) handle_type (HandleTableEntry attribute) HandleTableEntry (class in msl.writer) HandleType (class in msl.enums) HANDSHAKE_SECRET (MslKeyType attribute) harvester.ingestor module harvester.metadata_store module harvester.sidecar module

HAS_CHILDREN (BlockFlag attribute) HAS_KEY_HINTS (BlockFlag attribute) has_selection_info (ImportResult property) hash_algo (KDFParams attribute) HashAlgo (class in msl.enums) HeaderFlag (class in msl.enums) HEAP (RegionType attribute) HEURISTIC (Confidence attribute) HISTOGRAM_CHUNK_BYTES (in module core.entropy) hkdf_expand() (TLS13HKDF static method) hkdf_expand_label() (TLS13HKDF static method) hkdf_extract() (TLS13HKDF static method)

I

identifier (CryptoSecret attribute) IFACE_STATS (ConnRowType attribute) IKE_SA_KEY (MslKeyType attribute) IKEV2_IPSEC (MslProtocol attribute) IMAGE (RegionType attribute) IMPORT (EdgeKind attribute) import_dump() (in module app.tools) (in module msl.importer) import_elf_core() (in module msl.importer) import_minidump() (in module msl.importer) import_msl_passthrough() (in module msl.importer) IMPORT_PROVENANCE (BlockType attribute) import_raw_dump() (in module app.tools) (in module msl.importer) import_regioned_raw() (in module msl.importer) import_run_directory() (in module msl.importer) IMPORTED (HeaderFlag attribute)

ImportResult (class in msl.importer) infer_fields() (PatternGenerator static method) INVALID (BlockType attribute) INVARIANT (ByteClass attribute), [1] invariant_max (VarianceThresholds attribute), [1] INVESTIGATION (HeaderFlag attribute) IOS (OSType attribute) IPV4_ROUTE (ConnRowType attribute) IPV6_ROUTE (ConnRowType attribute) is_target (ProcessTableEntry attribute) iter_blocks() (MslReader method) iter_blocks_of_type() (MslReader method) iter_extension_blocks() (MslReader method) iter_find() (MslReader method) iter_find_run() (MslReader method) iter_region_headers() (MslReader method) iter_regions() (ConsensusVector method)

J

JsonExporter (class in architect.json_exporter)

K

KDF_ENTRY_POINT_GROUP (in module core.kdf_registry) kdf_lanes (MslEncryptionConfig attribute) kdf_memory (MslEncryptionConfig attribute) kdf_salt (MslEncryptionConfig attribute) kdf_time (MslEncryptionConfig attribute) kdf_type (MslEncryptionConfig attribute) KDFParams (class in core.kdf_base) KDFRegistry (class in core.kdf_registry) KdfType (class in msl.enums) key_bytes (KeyOccurrence attribute) KEY_CANDIDATE (ByteClass attribute), [1]

key_encap (MslEncryptionConfig attribute) KEY_HINT (BlockType attribute) key_hints_written (ImportResult attribute) key_length (ComparisonRegion attribute) key_lengths (KDFParams attribute) key_locator_from_pattern() (in module architect.yara_exporter) KEY_UPDATE_NAMES (PhaseNormalizer attribute) KeyEncap (class in msl.enums) KeyOccurrence (class in core.models) KeyState (class in msl.enums) kind (DumpFile attribute) KNOWN_MAX_MINOR_VERSION (MslReader attribute)

L

label (Match attribute) labels (KDFParams attribute) layout_row (AlignedSegment attribute) length (AlignedSegment attribute) (CapturedRun attribute) (Match attribute) (WindowProjection attribute) library (AnalysisContext attribute) (RunDirectory attribute) LINUX (OSType attribute) list_all() (AlgorithmRegistry method) (KDFRegistry method) list_by_mode() (AlgorithmRegistry method)

list_libraries() (DumpIngestor method) list_phases() (in module app.tools) list_protocols() (in module app.tools) list_scenarios() (DumpIngestor method) LITTLE (Endianness attribute) LIVE (VasNameSource attribute) load_dump_data() (DumpIngestor method) load_library_runs() (DumpIngestor method) load_oracle() (in module engine.oracle) load_oracle_config() (in module engine.oracle) local_addr (ConnectionTableEntry attribute) local_port (ConnectionTableEntry attribute) LZ4 (CompAlgo attribute)

M

MACOS (OSType attribute) MAPPED_FILE (RegionType attribute) MASTER_SECRET (MslKeyType attribute) Match (class in algorithms.base) matches (AlgorithmResult attribute) materialized (ImportResult attribute) MAX_CONSENSUS_WINDOW (in module engine.consensus) max_window_entropy() (in module core.entropy) MEMORY_REGION (BlockType attribute) MEMORY_REGIONS (CapBit attribute) meta (RunDirectory attribute) metadata (AlgorithmResult attribute) (Match attribute) MetadataStore (class in harvester.metadata_store) method (AlignmentReport attribute) MIB_COUNTER (ConnRowType attribute) MINIDUMP (SourceFormat attribute) MISSING_KEY (TagStatus attribute) ML_KEM_1024 (KeyEncap attribute) ML_KEM_768 (KeyEncap attribute) ML_KEM_PRIVATE_KEY (MslKeyType attribute) mode (BaseAlgorithm attribute) module algorithms.base algorithms.registry app.tools architect.json_exporter architect.pattern_generator architect.volatility3_exporter architect.yara_exporter core.entropy core.kdf core.kdf_base core.kdf_registry core.models core.phase_normalizer core.variance engine.consensus engine.oracle engine.pipeline harvester.ingestor harvester.metadata_store harvester.sidecar msl msl.enums msl.importer msl.reader msl.writer

MODULE_ENTRY (BlockType attribute) MODULE_LIST (CapBit attribute) MODULE_LIST_INDEX (BlockType attribute) module_size (ModuleEntrySpec attribute) module_uuid (ModuleEntrySpec attribute) ModuleEntrySpec (class in msl.writer) msl module MSL (SourceFormat attribute) msl.enums module msl.importer module msl.reader module msl.writer module MslEncryptionConfig (class in msl.writer) MslKeyType (class in msl.enums) MslProtocol (class in msl.enums) MslReader (class in msl.reader) MslWriter (class in msl.writer) MUTEX (HandleType attribute)

N

n_sources (AlignmentReport attribute) name (BaseAlgorithm attribute) (BaseKDF attribute) names (AlgorithmRegistry property) NETWORK_CONNECTION (BlockType attribute) NETWORK_STATE (CapBit attribute) NodeKind (class in msl.enums) nonce (MslEncryptionConfig attribute)

NONE (CompAlgo attribute) (KdfType attribute) (KeyEncap attribute) normalize_byte_classes() (in module core.variance) normalize_run() (PhaseNormalizer method) NOT_ENCRYPTED (TagStatus attribute) NOT_RESIDENT (PageState attribute) num_dumps (WelfordVariance property)

O

offset (KeyOccurrence attribute) (Match attribute) OFFSET (NodeKind attribute) open() (MslReader method) Oracle (class in engine.oracle) OracleBuildError OracleLoadError

OSType (class in msl.enums) OTHER (HandleType attribute) (HashAlgo attribute) (KeyEncap attribute) (MslKeyType attribute) (MslProtocol attribute) (RegionType attribute) output_path (ImportResult attribute)

P

p_hash() (TLS12PRF static method) PACKET_SOCKET (ConnRowType attribute) page_states (RegionSpec attribute) (StreamedRegionSpec attribute) PAGE_STATES_INFERRED (CapBit attribute) PageState (class in msl.enums) pairwise_leaves_sum() (in module core.variance) parent_uuid (ExtensionBlock attribute) parse() (SidecarParser static method) parse_phase_timestamp() (in module core.phase_normalizer) passphrase (MslEncryptionConfig attribute) path (DumpFile attribute) (HandleTableEntry attribute) (ModuleEntrySpec attribute) (RunDirectory attribute) PatternGenerator (class in architect.pattern_generator) payload (ExtensionBlock attribute) phase (AnalysisContext attribute) phase_mappings (RunDirectory attribute) phase_name (DumpFile attribute) phase_prefix (DumpFile attribute) PhaseMapping (class in core.phase_normalizer) PhaseNormalizer (class in core.phase_normalizer) pid (ConnectionTableEntry attribute) (HandleTableEntry attribute) (ProcessTableEntry attribute)

PIPE (HandleType attribute) POINTER (ByteClass attribute), [1] (EdgeKind attribute) POINTER_GRAPH (BlockType attribute) pointer_max (VarianceThresholds attribute), [1] post_tag_offset (MslReader property) ppid (ProcessTableEntry attribute) PQ_TLS (MslProtocol attribute) PRE_MASTER_SECRET (MslKeyType attribute) preview_import() (in module app.tools) prf() (TLS12PRF static method) PROCESS_IDENTITY (BlockType attribute) (CapBit attribute) PROCESS_TABLE (BlockType attribute) (TableBit attribute) ProcessTableEntry (class in msl.writer) project_slab_window() (ConsensusVector method) project_va_window() (ConsensusVector method) project_vas_window() (ConsensusVector method) Protection (class in msl.enums) protection (RegionSpec attribute) (StreamedRegionSpec attribute) protocol (BaseKDF attribute) (ConnectionTableEntry attribute) (CryptoSecret attribute) protocol_version (AnalysisContext attribute) (RunDirectory attribute)

Q

QUIC (MslProtocol attribute)

R

random_window_entropy() (in module core.entropy) rank_regions_by_length() (ConsensusVector method) RAW_DUMP (SourceFormat attribute) raw_key (MslEncryptionConfig attribute) raw_phase (PhaseMapping attribute) READ (Protection attribute) read_block_payload() (MslReader method) read_bytes() (MslReader method) read_view() (MslReader method) recipient_public (MslEncryptionConfig attribute) reencrypted (ImportResult attribute) REFERENCE_ENTROPY_THRESHOLD (in module core.entropy) region_for_va() (MslWriter method) region_type (RegionSpec attribute) (StreamedRegionSpec attribute) REGIONED_RAW (SourceFormat attribute) regions_written (ImportResult attribute) RegionSpec (class in msl.importer) RegionType (class in msl.enums) RELATED_DUMP (BlockType attribute) RELATED_DUMPS (CapBit attribute) remote_addr (ConnectionTableEntry attribute) remote_port (ConnectionTableEntry attribute) RESERVED (PageState attribute)

RESERVED_CONFIG_TABLE (in module engine.oracle) reset() (WelfordVariance method) result() (RunningTopK method) rewrap() (MslEncryptionConfig class method) rewrap_material (MslEncryptionConfig attribute) RSA_PRIVATE_KEY (MslKeyType attribute) rss (ProcessTableEntry attribute) run() (AnalysisPipeline method) (BaseAlgorithm method) run_data (ComparisonRegion attribute) run_directory_declared_maps() (in module msl.importer) run_directory_dump_files() (in module msl.importer) run_directory_maps_for() (in module msl.importer) run_labels (ComparisonRegion attribute) RUN_META_MAPS_KEY (in module msl.importer) run_number (RunDirectory attribute) run_offsets (ComparisonRegion attribute) run_span() (MslReader method) run_view() (MslReader method) RunDirectory (class in core.models) RUNNING (ThreadState attribute) RunningTopK (class in core.variance) runs (CapturedRunIndex attribute) (StreamedRegionSpec attribute)

S

save() (JsonExporter static method) (Volatility3Exporter static method) scan() (DumpIngestor method) scan_dataset() (in module app.tools) scan_extension_segments() (MslReader method) sealed_segments() (MslReader method) sealed_trailing_bytes (MslReader property) secret (KeyOccurrence attribute) secret_source (RunDirectory attribute) secret_type (ComparisonRegion attribute) (CryptoSecret attribute) secret_value (CryptoSecret attribute) secrets (AnalysisContext attribute) (RunDirectory attribute) secrets_only_in_excluded (ImportResult attribute) SECURITY_CONTEXT (CapBit attribute) SECURITY_TOKEN (BlockType attribute) segments (WindowProjection attribute) selection (ImportResult attribute) selection_summary() (ImportResult method) SESSION_KEY (MslKeyType attribute) set_region_filter() (in module app.tools) SHA256 (HashAlgo attribute) SHA512_256 (HashAlgo attribute) shannon_entropy() (in module core.entropy) SHARED_MEM (RegionType attribute) SHARED_MEMORY (CapBit attribute) SIDECAR_EXTENSIONS (SidecarParser attribute) SidecarParser (class in harvester.sidecar) size (WelfordVariance property) sizes_differed (AlignmentReport attribute) slab_offset (AlignedSegment attribute) slab_to_va() (ConsensusVector method)

SLEEPING (ThreadState attribute) SOCKET (HandleType attribute) SOCKET_FAMILY_AGG (ConnRowType attribute) sorted_path_matches_numpy() (in module core.entropy) SORTED_PATH_MAX_WINDOW (in module core.entropy) SORTED_SLAB_WINDOW_BYTES (in module core.entropy) SOURCE_METADATA (VasNameSource attribute) source_path (ImportResult attribute) SourceFormat (class in msl.enums) SPECULATIVE (Confidence attribute) SSH (MslProtocol attribute) SSH_SESSION_KEY (MslKeyType attribute) STACK (RegionType attribute) start (WindowProjection attribute) start_time_ns (ProcessTableEntry attribute) state (ConnectionTableEntry attribute) state_arrays() (WelfordVariance method) STOPPED (ThreadState attribute) stream_entropy_profile() (in module core.entropy) STREAM_SLAB_BYTES (in module core.entropy) StreamedRegionSpec (class in msl.importer) STRUCTURAL (ByteClass attribute), [1] structural_max (VarianceThresholds attribute), [1] summary() (MetadataStore method) SUPPORTED_MAJOR_VERSION (MslReader attribute) supported_secret_types() (BaseKDF method) SYMBOL (NodeKind attribute) SYNTHESIZED (VasNameSource attribute) SYSTEM_CONTEXT (BlockType attribute) (CapBit attribute) SYSTEM_HANDLE_TABLE (CapBit attribute) SYSTEM_NETWORK_TABLE (CapBit attribute) SYSTEM_PROCESS_TABLE (CapBit attribute)

T

TableBit (class in msl.writer) TagStatus (class in msl.enums) THREAD_CONTEXT (BlockType attribute) THREAD_CONTEXTS (CapBit attribute) ThreadState (class in msl.enums) threshold_is_reachable() (in module core.entropy) TIMER (HandleType attribute) timestamp (DumpFile attribute) (PhaseMapping attribute) TLS12PRF (class in core.kdf) TLS13HKDF (class in core.kdf)

TLS_12 (MslProtocol attribute) TLS_13 (MslProtocol attribute) tls_version (AnalysisContext property) (RunDirectory property) TLSSecret (in module core.models) to_dict() (AlignedSegment method) (AlignmentReport method) (WindowProjection method) to_string() (JsonExporter static method) total_bytes (ImportResult attribute) trailing_bytes (MslReader property)

U

uid (ProcessTableEntry attribute) UNINTERRUPTIBLE (ThreadState attribute) UNKNOWN (ArchType attribute) (HandleType attribute) (KeyState attribute) (MslKeyType attribute) (MslProtocol attribute) (OSType attribute) (RegionType attribute) (ThreadState attribute)

UNMAPPED (PageState attribute) UNPARSED_TIMESTAMP (in module core.phase_normalizer) UNSPECIFIED (VasNameSource attribute) user (ProcessTableEntry attribute)

V

va_overview() (ConsensusVector method) va_start (CapturedRun attribute) va_starts (CapturedRunIndex attribute) VALID (TagStatus attribute) validate() (VarianceThresholds method), [1] validate_oracle_sandboxed() (in module engine.oracle) validate_pair() (BaseKDF method) variance() (WelfordVariance method) variance_summary() (WelfordVariance method) VarianceThresholds (class in core.variance) (class in engine.consensus)

vas (AlignedSegment attribute) VAS_MAP (BlockType attribute) vas_offset (CapturedRun attribute) vas_starts (CapturedRunIndex attribute) VasNameSource (class in msl.enums) verify() (Oracle method) version (ModuleEntrySpec attribute) versions (BaseKDF attribute) Volatility3Exporter (class in architect.volatility3_exporter)

W

WAITING (ThreadState attribute) warnings (AlignmentReport attribute) (ImportResult attribute) welford_state() (ConsensusVector method) WelfordVariance (class in core.variance) window_entropies() (in module core.entropy) window_offset (AlignedSegment attribute)

WindowProjection (class in engine.consensus) WINDOWS (OSType attribute) WIREGUARD (MslProtocol attribute) WIREGUARD_KEY (MslKeyType attribute) WRITE (Protection attribute) write() (MslWriter method) write_streaming() (MslWriter method)

X

X25519 (KeyEncap attribute) X25519_ML_KEM_768 (KeyEncap attribute)

X86 (ArchType attribute) X86_64 (ArchType attribute) XCHACHA20_POLY1305 (EncAlgo attribute)

Y

YaraExporter (class in architect.yara_exporter)

Z

ZERO_BLOCK_BYTES (in module core.entropy)

ZOMBIE (ThreadState attribute) ZSTD (CompAlgo attribute)