Package rekall :: Package plugins :: Package linux :: Module check_fops
[frames] | no frames]

Module check_fops

source code


Author: Michael Cohen based on code by Andrew Case

License: GNU General Public License 2.0

Contact: scudette@gmail.com

Classes
  CheckProcFops
Checks the proc filesystem for hooked f_ops.
  TestCheckProcFops
  CheckTaskFops
Check open files in tasks for f_ops modifications.
  TestCheckTaskFops
Variables
  __package__ = 'rekall.plugins.linux'