Package rekall :: Package plugins :: Package darwin :: Module checks
[frames] | no frames]

Module checks

source code

Plugins for checking internal consistancy of pointers.


Author: Michael Cohen <scudette@google.com>

Classes
  DarwinFindSysent
Find sysent by scanning around nsysent.
  DarwinCheckSysCalls
Checks the syscall table.
  OIDInfo
  DarwinSysctl
Dumps the sysctl database.
  CheckTrapTable
Checks the traps table for hooks.
Variables
  __package__ = 'rekall.plugins.darwin'