Class RekallHelper

source code

A More useful default help function.

Instance Methods

__call__(self, item=None, **kwargs)

source code

Inherited from site._Helper: __repr__

Inherited from object: __delattr__, __format__, __getattribute__, __hash__, __init__, __new__, __reduce__, __reduce_ex__, __setattr__, __sizeof__, __str__, __subclasshook__

Class Variables
	HELP_MESSAGE = `'Welocome to Rekall Memory Forensics.\n\nTo get...`

Properties
Inherited from `object`: `__class__`

Method Details

call(self, item=None, **kwargs)
(Call operator)

source code

Overrides: site._Helper.__call__

Class Variable Details

HELP_MESSAGE

Value:

'''Welocome to Rekall Memory Forensics.

To get started:

- Initialize the Rekall session using the rekall plugin. e.g.:

Win7SP1x64:pmem 13:36:23> rekall filename=r"\\\\.\\pmem", profile="Win
7SP1x64", pager="notepad"
...

Class RekallHelper

__call__(self, item=None, **kwargs) (Call operator)

HELP_MESSAGE

call(self, item=None, **kwargs)
(Call operator)