Package rekall :: Package plugins :: Package windows :: Module connscan
[frames] | no frames]

Module connscan

source code

This module implements the fast connection scanning


Author: AAron Walters and Brendan Dolan-Gavitt

License: GNU General Public License 2.0 or later

Contact: awalters@volatilesystems.com,bdolangavitt@wesleyan.edu

Organization: Volatile Systems

Classes
  PoolScanConnFast
  ConnScan
Scan Physical memory for _TCPT_OBJECT objects (tcp connections)
Variables
  __package__ = 'rekall.plugins.windows'