Package rekall :: Package plugins :: Package windows :: Module privileges

Module privileges

Inspect the privileges in each process's tokens.

These sets of plugins are designed around the blog post "Windows Access Tokens - !token and _TOKEN":

ttps://bsodtutorials.wordpress.com/2014/08/09/windows-access-tokens-token-and-_token/

Author: Michael Cohen <scudette@gmail.com>

Classes
	PrivilegesHook Fetch the PrivilegesHook table.
	Privileges Prints process privileges.

Variables
	__package__ = `'rekall.plugins.windows'`