Package rekall :: Package plugins :: Package addrspaces :: Module pmem

Module pmem

Address spaces specific to pmem live here.

Author: Adam Sindelar <adamsh@google.com>

Classes
	MacPmemAddressSpace Implements an address space to overlay the new MacPmem device.

Functions

efi_type_readable(efi_type)

source code

Variables
	EFI_SEGMENTS_SAFETY = `{'EfiACPIMemoryNVS': 'r', 'EfiACPIReclai...`
	__package__ = `'rekall.plugins.addrspaces'`

Variables Details

EFI_SEGMENTS_SAFETY

Value:

{'EfiACPIMemoryNVS': 'r',
 'EfiACPIReclaimMemory': 'rw',
 'EfiBootServicesCode': 'rw',
 'EfiBootServicesData': 'rw',
 'EfiConventionalMemory': 'r',
 'EfiLoaderCode': 'rw',
 'EfiLoaderData': 'rw',
 'EfiMaxMemoryType': 'rw',
...