Package rekall :: Module plugin
[frames] | no frames]

Module plugin

source code

Plugins allow the core rekall system to be extended.


Author: Michael Cohen <scudette@gmail.com>

Classes
  Error
Raised for plugin errors.
  PluginError
An error occured in a plugin.
  InvalidArgs
Invalid arguments.
  Abort
Signal aborting of the plugin.
  CommandOption
An option specification.
  ModeBasedActiveMixin
  Command
A command can be run from the rekall command line.
  ProfileCommand
A baseclass for all commands which require a profile.
  PluginHeader
  ArgsParserMixin
A Mixin which provides argument parsing and validation.
  TypedProfileCommand
Mixin that provides the plugin with standardized table output.
  Producer
Finds and outputs structs of a particular type.
  CachedProducer
A producer backed by a cached session parameter hook.
  KernelASMixin
A mixin for those plugins which require a valid kernel address space.
  PhysicalASMixin
A mixin for those plugins which require a valid physical address space.
  PrivilegedMixIn
  DataInterfaceMixin
This declares a plugin to present a table-like data interface.
  PluginOutput
  PluginMetadataDatabase
A database of all the currently registered plugin's metadata.
Variables
  __package__ = 'rekall'