Package rekall :: Package plugins :: Package windows :: Module address_resolver

Module address_resolver

The module implements the windows specific address resolution plugin.

Author: Michael Cohen <scudette@gmail.com>

Classes
	PEModule Windows overlays PE files in memory.
	VadModule A Module corresponding to a VAD entry.
	KernelModule A Windows kernel module.
	WindowsAddressResolver A windows specific address resolver plugin.
	PECommandPlugin A command that is active when inspecting a PE file.
	PESectionModule A section in a PE file.
	PEAddressResolver A simple address resolver for PE files.
	TestWindowsAddressResolver

Variables
	__package__ = `'rekall.plugins.windows'`