Class LinuxConverter

source code

Convert an existing Linux profile zip file.

Since building the linux profile often happens on the target system, where
Rekall is not normall running, we just convert the result of running Make in
the tools/linux/ directory. See tools/linux/README for details.

In short:

- Run make in tools/linux/ directory. This will build module_dwarf.ko with
  debugging symbols.

- If you have zip installed, the above step will create the required zip
  file. Otherwise Create a zip file manually with module_dwarf.ko and
  /boot/System.map-`uname -r` (Sometimes when running make not as the root
  user, its not possible to read the System.map file).

Finally use this tool to convert the profile to a Rekall compatible profile.