mquire 1.2.7

Memory forensics and analysis tool for querying Linux kernel memory dumps using SQL
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40

//
// Copyright (c) 2025-present, Trail of Bits, Inc.
// All rights reserved.
//
// This source code is licensed in accordance with the terms specified in
// the LICENSE file found in the root directory of this source tree.
//

use crate::{
    core::{
        entities::{
            network_interface::NetworkInterface, system_information::SystemInformation,
            system_version::SystemVersion,
        },
        error::Result,
    },
    memory::{readable::Readable, virtual_address::VirtualAddress},
};

use std::{any::Any, sync::Arc};

/// Common interface for operating system implementations.
pub trait OperatingSystem: Send + Sync + Any {
    /// Returns the OS version.
    fn get_os_version(&self) -> Result<SystemVersion>;

    /// Returns the system information.
    fn get_system_information(&self) -> Result<SystemInformation>;

    /// Returns an iterator over network interfaces.
    fn iter_network_interfaces(
        &self,
    ) -> Result<Box<dyn Iterator<Item = Result<NetworkInterface>> + '_>>;

    /// Returns a reader for the file struct at the given virtual address.
    fn get_file_reader(&self, file: VirtualAddress) -> Result<Arc<dyn Readable>>;

    /// Converts this Arc to an Arc<dyn Any> for downcasting.
    fn as_any_arc(self: Arc<Self>) -> Arc<dyn Any + Send + Sync>;
}