MemorySearchMatch

final class ntoseye.MemorySearchMatch

A memory-search hit with symbol and location context.

property address: int

Where the pattern matched.

property kind: str

What the address is: a module, a kernel region, a process VAD, physical memory, or vtl1.

property module: AddressModule | None

The module containing the match, if any.

property offset: int

The match’s offset from the search start.

property region: MemoryRegion | None

The VAD region containing the match, for process addresses.

property section: str | None

The module section containing the match, if any.

property symbol: str | None

The nearest symbol, if one resolved.

to_dict() → dict[str, Any]

property va_type: str | None

The kernel virtual-address region type, for kernel addresses.