Package rekall :: Package plugins :: Package darwin :: Module zones
[frames] | no frames]

Module zones

source code

Collectors and plugins that deal with Darwin zone allocator.


Author: Adam Sindelar <adamsh@google.com>

Classes
  DarwinZoneHook
Lists all allocation zones.
  DarwinZoneCollector
  AbstractZoneElementFinder
Finds all the valid structs in an allocation zone.
  DarwinDumpZone
Dumps an allocation zone's contents.
  DarwinSocketZoneFinder
  DarwinSocketZoneCollector
  DarwinTTYZoneFinder
  DarwinTTYZoneCollector
  DarwinSessionZoneFinder
  DarwinSessionZoneCollector
  DarwinZoneVnodeFinder
  DarwinZoneVnodeCollector
  PsListDeadProcFinder
  DarwinDeadProcessCollector
Lists dead processes using the proc allocation zone.
  DarwinZoneFileprocFinder
  DarwinDeadFileprocCollector
Variables
  __package__ = 'rekall.plugins.darwin'