Package rekall :: Package plugins :: Package addrspaces :: Module crash
[frames] | no frames]

Module crash

source code

An Address Space for processing crash dump files.

Classes
  WindowsCrashDumpSpace32
This Address Space supports windows Crash Dump format
  WindowsCrashDumpSpace64
This AS supports windows Crash Dump format.
  WindowsCrashBMP
This Address Space supports the new windows Crash Dump format.
Variables
  __package__ = 'rekall.plugins.addrspaces'