Module modes

source code

Declares all the modes Rekall can be in.

The Rekall session can exist in several modes at the same time. Modes are just simple True/False flags that represent certain aspects of the Rekall session. For example, a session may be in "mode_image" if it is dealing with an image.

Plugins can then activate depending on the current mode vector. For example, a plugin may declare that it is active if all these modes are set "mode_image,mode_windows_memory" Which means it is only active if a windows memory image is used.