Package rekall :: Package plugins :: Package linux :: Module pslist
[frames] | no frames]

Module pslist

source code


Author: Andrew Case

License: GNU General Public License 2.0 or later

Contact: atcuno@gmail.com

Organization: Digital Forensics Solutions

Classes
  LinuxPsList
Gathers active tasks by walking the task_struct->task list.
  LinMemMap
Dumps the memory map for linux tasks.
  LinMemDump
Dump the addressable memory for a process.
  TestLinMemDump
  PidHashTable
List processes by enumerating the pid hash tables.
Variables
  PIDTYPE_PID = 0
  __package__ = 'rekall.plugins.linux'