Package rekall :: Package plugins :: Package addrspaces :: Module lime
[frames] | no frames]

Module lime

source code

This is an address space for the Lime file format.

Note that Lime is an ad-hoc file format produced by the Lime Linux memory acquisition tool (https://github.com/504ensicsLabs/LiME). The format does not really offer any advantages over the standard ELF core dump format and should therefore be avoided. This address space simply allows Rekall to read images produced by Lime in case you have such an image about.

Classes
  LimeProfile
A profile for Lime files.
  LimeAddressSpace
An Address Space to read from lime images.
Variables
  __package__ = 'rekall.plugins.addrspaces'