Package rekall :: Package plugins :: Package windows :: Module pool

Module pool

Plugins to inspect the windows pools.

Author: Michael Cohen <scudette@google.com>

Classes
	Pools Prints information about system pools.
	PoolTracker Enumerate pool tag usage statistics.

Functions

find_pool_alloc_before(session, offset, pool_tag)
Searches address_space for a pool allocation containing offset.

source code

Variables
	__package__ = `'rekall.plugins.windows'`