Package rekall :: Package plugins :: Package addrspaces :: Module win32

Module win32

This is a windows specific address space.

Classes
	Win32FileWrapper A simple wrapper that makes a win32 file handle look like an AS.
	Win32AddressSpace This is a direct file AS for use in windows.
	Win32FileAddressSpace
	WinPmemAddressSpace An address space specifically designed for communicating with WinPmem.

Functions

CTL_CODE(DeviceType, Function, Method, Access)

source code