Package rekall :: Package plugins :: Package response :: Module linux
[frames] | no frames]

Module linux

source code

Linux specific response plugins.

Classes
  LiveMap
  IRMaps
Examine the process memory maps.
  IRVadDump
Dump the VMA memory for a process.
  LinuxAPIProfile
Profile for Linux live analysis.
  LinuxAPIProcessAddressSpace
An address space which read processes using ReadProcessMemory().
  MapModule
A module representing a memory mapping.
  LinuxAPIAddressResolver
A Linux specific address resolver plugin.
Variables
  __package__ = 'rekall.plugins.response'