Package rekall :: Package plugins :: Package response :: Module windows

Module windows

Windows specific response plugins.

Classes
	WmiResult Represent WMI result.
	Wmi Executes a WMI query and returns results.
	WindowsRootFileInformation A special FileInformation class to handle windows drives.
	WindowsFileInformation
	LiveModule Address resolver modules accessed through APIs.
	WinAPIAddressResponse Address resolver for windows API access.

Functions

get_drives()
List all the drives on this system.

source code