Package rekall :: Package plugins :: Package addrspaces :: Module aff4

Module aff4

This Address Space allows us to open aff4 images.

AFF4 images are produced by the Rekall memory acquisition tools (Pmem and friends).

For this address space to work:

pip install pyaff4

Classes
	AFF4StreamWrapper
	AFF4AddressSpace Handle AFF4Map or AFF4Image type streams.

Variables
	aff4_cloud = `None` hash(x)
	LOGGER = `logging.getLogger("pyaff4")`
	__package__ = `'rekall.plugins.addrspaces'`