Package rekall :: Package plugins :: Package windows :: Package registry
[frames] | no frames]

Source Code for Package rekall.plugins.windows.registry

 1  # Module for memory analysis of the windows registry. 
 2  # pylint: disable=unused-import 
 3  from rekall.plugins.windows.registry import evtlogs 
 4  from rekall.plugins.windows.registry import getsids 
 5  from rekall.plugins.windows.registry import getservicesids 
 6   
 7  # Disabled currently since it only works on XP and it also appears to be broken. 
 8  #try: 
 9      # This optional plugin requires pycrypto 
10  #    from rekall.plugins.windows.registry import lsadump 
11  #except ImportError: 
12  #    pass 
13   
14  from rekall.plugins.windows.registry import printkey 
15  from rekall.plugins.windows.registry import registry 
16  from rekall.plugins.windows.registry import userassist 
17