Package rekall :: Package plugins :: Package linux :: Module fs
[frames] | no frames]

Module fs

source code

This module implements filesystem-related plugins for Linux.


Author: Jordi Sanchez <parki.san@gmail.com>

Classes
  Mfind
Finds a file by name in memory.
  Mls
Lists the files in a mounted filesystem.
  Mcat
Returns the contents available in memory for a given file.
  TestMfind
  TestMls
  TestMcat
Functions
 
InodeToPermissionString(inode)
Represents an inode's permisions as an ls-like string.
source code
Variables
  __package__ = 'rekall.plugins.linux'