Package rekall :: Package plugins :: Package tools :: Module aff4acquire

Module aff4acquire

This plugin adds the ability for Rekall to acquire an AFF4 image.

It is an alternative to the pmem suite of acquisition tools, which also creates AFF4 images. The difference being that this plugin will apply live analysis to acquire more relevant information (e.g. mapped files etc).

Author: Michael Cohen <scudette@google.com>

Classes
	AFF4ProgressReporter
	AddressSpaceWrapper A wrapper around an address space.
	CredentialManager Manage GCE default credentials through the environment.
	AbstractAFF4Plugin The base class for all AFF4 plugins.
	AFF4Acquire Copy the physical address space to an AFF4 file.
	TestAFF4Acquire
	AFF4Ls List the content of an AFF4 file.
	AFF4Dump Dump the entire resolver contents for an AFF4 volume.
	AFF4Export Exports all the streams in an AFF4 Volume.

Variables
	aff4_cloud = `None` hash(x)
	__package__ = `'rekall.plugins.tools'`