MemorySearchMatch

final class ntoseye.MemorySearchMatch

Subclass of BaseRecord.

A memory-search hit, with its symbol and location data.

property address: int

The address of the match.

property kind: Literal['kernel_module', 'user_image', 'kernel_region', 'private', 'mapped', 'unknown', 'physical', 'vtl1', 'foreign']

The kind of address.

property module: AddressModule | None

The module containing the match, if any.

property offset: int

The offset of the match from the start of the search.

property region: MemoryRegionInfo | None

The region containing the match, if any.

property section: str | None

The module section containing the match, if any.

property symbol: str | None

The nearest symbol, if one resolves.

property va_type: str | None

The _MI_SYSTEM_VA_TYPE name, for a kernel-region match.