Package rekall :: Package plugins :: Package response :: Module files
[frames] | no frames]

Module files

source code

This module adds arbitrary file reading to Rekall.


Author: Michael Cohen <scudette@google.com>

Classes
  IRFind
List files recursively from a root path.
  IRStat
  Hash
A class to hold a hash value.
  IRHash
  Component
  LiteralComponent
  RegexComponent
  RecursiveComponent
  IRGlob
Search for files by filename glob.
  IRDump
Hexdump files from disk.
Functions
 
print_component_tree(tree, depth='')
This is used for debugging the component_tree.
source code
Variables
  BUFFER_SIZE = 10485760
  __package__ = 'rekall.plugins.response'