Package rekall :: Package plugins :: Package common :: Module sigscan
[frames] | no frames]

Module sigscan

source code


Author: Andreas Moser <grrrrrrrrr@surfsup.at>

Classes
  SignatureScannerCheck
A scanner that searches for a signature.
  SignatureScanner
  SigScanMixIn
Scan memory for signatures.
  TestSigScanPhysical
Runs sigscan against physical memory.
  TestSigScanKernel
Runs sigscan against the kernel.
  TestSigScanProcess
Runs sigscan against processes.
Variables
  __package__ = 'rekall.plugins.common'