PteWalk

final class ntoseye.PteWalk

Subclass of BaseRecord.

The page-table entries that map an address, read through NT’s self-map (!pte).

property address: int

property dtb: int

The address space the walk was performed in (the attached process DTB when attached, else the kernel), so callers know what was walked.

property levels: list[PteLevel]

The entries read, root first: each below the root only when the one above it points at a table.

property non_resident: NonResident | None

Where the page is when it is not in memory, and whether reads still get it (from the memory-compression store); None when it is in memory.