Module ipc 

Linux System V IPC object enumeration.

Enumerates shared memory segments, semaphores, and message queues from kernel memory by walking the shm_ids and sem_ids structures. These IPC mechanisms can be used for covert data exchange between processes and are relevant for detecting process collaboration or C2 channels.

Structs

IpcSemInfo

Information about a System V semaphore set.

IpcShmInfo

Information about a System V shared memory segment.

Functions

walk_semaphores

Walk System V semaphore sets via the kernel sem_ids structure.

walk_shm_segments

Walk System V shared memory segments via the kernel shm_ids structure.