Package rekall :: Package plugins :: Package linux :: Module common
[frames] | no frames]

Module common

source code


Author: Andrew Case

License: GNU General Public License 2.0 or later

Contact: atcuno@gmail.com

Organization: Digital Forensics Solutions

Classes
  KAllSyms
A parser for KAllSyms files.
  AbstractLinuxCommandPlugin
A base class for all linux based plugins.
  AbstractLinuxParameterHook
  LinuxFindDTB
A scanner for DTB values.
  LinuxPlugin
Plugin which requires the kernel Address space to be loaded.
  LinProcessFilter
A class for filtering processes.
  HeapScannerMixIn
A mixin for converting a scanner into a heap only scanner.
  KernelAddressCheckerMixIn
A plugin mixin which does kernel address checks.
  Hostname
  LinuxPageOffset
The highest address for user mode/kernel mode division.
  LinuxKASLR
The Kernel Address Space Randomization constant.
  LinuxInitTaskHook
Variables
  __package__ = 'rekall.plugins.linux'