Package rekall :: Package plugins :: Package overlays :: Package windows :: Module tokens

Module tokens

Classes around handling tokens, privileges etc.

Author: Michael Cohen <scudette@gmail.com>

Classes
	XP_TOKEN XP Style privileges are just an array.
	VISTA_TOKEN A Vista Style _TOKEN object.

Functions

InitializeTokenProfiles(profile)

source code

Variables
	xp_style_overlays = `{'_TOKEN': [None, {'Privileges': [None, ['...`
	__package__ = `'rekall.plugins.overlays.windows'`

Variables Details

xp_style_overlays

Value:

{'_TOKEN': [None,
            {'Privileges': [None,
                            ['Pointer',
                             {'target': 'Array',
                              'target_args': {'count': <function <lamb
da> at 0x7fafd6c87848>,
                                              'target': '_LUID_AND_ATT
RIBUTES'}}]]}]}