images.rekall-forensic.com

Python index links

This is the image Repository for Rekall ( http://www.rekall-forensic.com)

These files are also available over SSL from https://storage.googleapis.com/images.rekall-forensic.com/index.html

This site contains several test images which are intended to be shared. Many of these are used in Rekall's test suite.

SizeDateFile name
375973250Wed Jul 20 14:09:54 2016 address_translation_tests/swapper_test.aff4
349907252Wed Jul 20 14:11:44 2016 address_translation_tests/swapper_test_paged_pde.aff4
278618674Wed Jul 20 14:06:33 2016 aws/Windows_Server-2003-R2_SP2-English-32Bit-Base-2015.02.11.aff4
525533408Wed Jul 20 14:09:02 2016 aws/Windows_Server-2012-R2_RTM-English-64Bit-Base-2015.02.11.aff4
4765028Wed Jul 20 13:46:04 2016 linux/3.16.0-23-generic_amd64.json
3902051Wed Jul 20 13:45:54 2016 linux/3.16.0-23-generic_x86.json
2887591Wed Jul 20 13:45:31 2016 linux/Debian-3.2.0-amd64
29661425Wed Jul 20 13:49:19 2016 linux/Linux-3.2.0-4-686-pae.E01
2026181443Wed Jul 20 14:50:37 2016 linux/Ubuntu14.10_virtualbox.aff4
60031999Wed Jul 20 13:55:43 2016 linux/debianx64.elf.E01
512818990Wed Jul 20 14:09:41 2016 OSX/efilter_dfrws_eu_demo/BADCLONE.aff4
506738379Wed Jul 20 14:09:50 2016 OSX/efilter_dfrws_eu_demo/BYSTANDER.aff4
461190349Wed Jul 20 14:25:25 2016 OSX/efilter_dfrws_eu_demo/ZERO.aff4
1364897Wed Jul 20 13:45:23 2016 test_suite/android/Evo4G.json
117817825Wed Jul 20 14:03:34 2016 test_suite/android/Evo4GRodeo.aff4
29661425Wed Jul 20 13:49:01 2016 test_suite/linux-3.2.0-PAE/Linux-3.2.0-4-686-pae.E01
9332369Wed Jul 20 13:47:03 2016 test_suite/ntfs/ntfs1-gen1.E01
1042828649Wed Jul 20 14:37:15 2016 test_suite/osx10.11.3/10.11.3.aff4
101958594Wed Jul 20 13:59:00 2016 test_suite/osx10.9.5/vmem.e01
5563776Wed Jul 20 13:47:06 2016 test_suite/pe/ntoskrnl.exe
6040576Wed Jul 20 13:46:59 2016 test_suite/tigger/B5DDBBCD0BF24B2EA72E36AC4F1CBD002.pdb
42386495Wed Jul 20 13:52:47 2016 test_suite/tigger/tigger.vmem.E01
858115868Wed Jul 20 14:36:29 2016 test_suite/win10/win10.aff4
204989347Wed Jul 20 14:23:08 2016 test_suite/win7/win7.elf.E01
78379947Wed Jul 20 14:01:04 2016 test_suite/xen/xen-guest.E01
44032941Wed Jul 20 13:54:59 2016 test_suite/zeus/zeus.vmem.E01
1013405783Sun Jun 28 11:39:42 2015 windows/7601.win7sp1_gdr.150316-1654-with-zombie-wuauclt.exe.E01
858115868Wed Jul 20 14:47:08 2016 windows/win10.aff4
618936673Wed Jul 20 14:49:30 2016 windows/win10_20160425.aff4
11110901205Wed Jul 20 15:45:40 2016 windows/win2012server_130Gb_20Core.aff4
236801889Wed Aug 13 07:19:28 2014 windows/win8AMD64.dmp.E01
874291743Wed Jul 20 14:36:20 2016 windows/DFRWS_2015_Workshop/images/MirandaTest.aff4
1203414901Wed Jul 20 14:51:17 2016 windows/DFRWS_2015_Workshop/images/hank.aff4
2596188Wed Jul 20 13:48:44 2016 windows/DFRWS_2015_Workshop/Workshop/ForensicReverseEngineeringwithRekall-Solutions.pdf
629989Wed Jul 20 13:49:59 2016 windows/DFRWS_2015_Workshop/Workshop/ForensicReverseEngineeringwithRekall-Workshopnotes.pdf
3005907Wed Jul 20 13:50:52 2016 windows/DFRWS_2015_Workshop/Workshop/ISCC2015_presentation.pdf
5124Wed Jul 20 13:50:05 2016 windows/DFRWS_2015_Workshop/Workshop/miranda_final.py
501510Wed Jul 20 13:51:56 2016 windows/DFRWS_2015_Workshop/Workshop/p1138-cohen.pdf