Location: PHPKode > projects > Ptk-forensics > ptk/lib/analysis_ram.php
<?
/*
PTK  - DFLabs
Copyright (C) 2008 - DFLabs srl - All rights reserved
hide@address.com
*/
include("header.php");
include("check_session_image.php");
$part_id = sanitize($_SESSION["partition0_id"],INT);
?>

<link rel="stylesheet" type="text/css" href="../css/ram.css"/>

<div style="width:10px; height:20px"></div>
<div id="panel">
<div style="padding:20px; padding-top:10px; padding-bottom:10px;">
	<table class="info" style="float:left">
		<tr>
		<td>Choose analysis type:</td>
		<td>
		<select id="command" style="width: 200px" onchange="document.getElementById('description').innerHTML = '';">
			<option></option>
			<option value="connections" onclick="set_ram_options(false,false,false,false,false)">connections</option>
			<option value="connscan" onclick="set_ram_options(true,true,true,false,false)">connscan</option>
			<option value="datetime" onclick="set_ram_options(false,false,false,false,false)">datetime</option>
			<option value="dlllist" onclick="set_ram_options(false,false,false,false,false)">dlllist</option>
			<option value="files" onclick="set_ram_options(false,false,false,false,false)">files</option>
			<option value="ident" onclick="set_ram_options(false,false,false,false,false)">ident</option>
			<option value="modules" onclick="set_ram_options(false,false,false,false,false)">modules</option>
			<option value="pslist" onclick="set_ram_options(false,false,false,false,false)">pslist</option>
			<option value="psscan" onclick="set_ram_options(true,true,true,false,false)">psscan</option>
			<option value="sockets" onclick="set_ram_options(false,false,false,false,false)">sockets</option>
			<option value="sockscan" onclick="set_ram_options(true,true,true,false,false)">sockscan</option>
			<!--<option value="strings" onclick="set_ram_options(false,false,false,false,false,true)">strings</option>-->
			<option value="thrdscan" onclick="set_ram_options(true,true,true,false,false)">thrdscan</option>
			<option value="vadwalk" onclick="set_ram_options(false,false,false,true,true)">vadwalk</option>
			<option value="vadinfo" onclick="set_ram_options(false,false,false,false,true)">vadinfo</option>
			<option value="vaddump" onclick="set_ram_options(false,false,false,false,true)">vaddump</option>
		</select>
		<img src="../img/help.gif" style="cursor:pointer" title="Help" onclick="set_ram_description(document.getElementById('command').value)">

		<img id='star_' src='../img/star_add.png' style='cursor:pointer' onclick="var name=document.getElementById('command').value; displayMessage('modal_bookmark.php?arg1=7&arg2='+name+'&arg3=<?=$part_id?>&arg4='+name, '340', '350');return false">

		</td>		
		</tr>

		<tr id="option1" style="display:none"><td>Start offset:</td><td><input type="text" id="start" style="width:200px"></td></tr>
		<tr id="option2" style="display:none"><td>End offset:</td><td><input type="text" id="end" style="width:200px"></td></tr>
		<tr id="option3" style="display:none"><td>Slow scan:</td><td><input type="checkbox" id="slow" value="1"> yes</td></tr>
		
		<tr id="option4" style="display:none">
			<td>Output format:</td>
			<td>
			<select id="format" style="width: 200px">
				<option value="table">table</option>
				<option value="tree">tree</option>
				<option value="DOT">DOT file</option>
			</select>			
			</td>
		</tr>
		<tr id="option5" style="display:none"><td>Offset:</td><td><input type="text" id="offset" style="width:200px"></td></tr>
		<tr id="option6" style="display:none"><td>Strings file:</td><td><input type="text" id="stringfile" style="width: 200px"></td></tr>
		<tr><td></td></tr>
		<tr><td></td></tr>
		<tr>
			<td>
			<button onclick="start_ram_analysis('<?=$_SESSION['image_path']?>'); " style="width:100px" id="start_ram_analysis">Start</button>
			&nbsp;&nbsp;<img id="progress" src='../img/progress.gif' style="display:none;">
			</td>
		</tr>
		<tr><td></td></tr>
		<tr><td></td></tr>		
	</table>
	<div id="description" style="font-size:7pt; padding-left:10px;margin-top:15px;float:left;width:400px"></div>
</div>
</div>
<div id="panel_handle" onclick="switchScroll('panel')"></div>

<div id="result_container">
	<pre>
	<div id="results" style="padding:10px; padding-top:0px"></div>
	</pre>
</div>

<?if($_SESSION['ram_type']==''){?>
<script type="text/javascript">
ajax_request_ram('get_command_output.php?id=8&arg1=<?=$_SESSION['image_path'];?>', 'results');
</script>
<?}?>

<?include("footer.php");?>
Return current item: Ptk-forensics