Package rekall :: Package plugins :: Package windows :: Module pfn

Module pfn

Classes
	VtoP Prints information about the virtual to physical translation.
	PFNInfo Prints information about an address from the PFN database.
	PtoV Converts a physical address to a virtual address.
	WinRammap Scan all physical memory and report page owners.
	TestWinRammap
	DTBScan Scans the physical memory for DTB values.
	TestDTBScan
	WinSubsectionProducer Produce all the subsection objects we know about.
	WinPrototypePTEArray A ranged collection for Prototype PTE arrays.

Variables
	__package__ = `'rekall.plugins.windows'`