Package rekall :: Package plugins :: Package tools :: Module dynamic_profiles
[frames] | no frames]

Module dynamic_profiles

source code

This module implements dynamic profiles.

A Dynamic profile is a way of discovering certain parameters via running a matching signature.

Classes
  DisassembleMatcher
A matching engine for disassembler rules.
  DisassembleConstantMatcher
Search for the value of global constants using disassembly.
  FirstOf
Try a list of callables until one works.
  DynamicConstantProfileLoader
Produce a callable for a constant.
  DisassembleStructMatcher
Match a struct based on rules.
  DynamicStructProfileLoader
Produce a callable for a constant.
Variables
  __package__ = 'rekall.plugins.tools'