Package rekall :: Package plugins :: Package windows :: Module taskmods
[frames] | no frames]

Module taskmods

source code

Classes
  WinPsList
List processes for windows.
  WinDllList
Prints a list of dll modules mapped into each process.
  WinMemMap
Calculates the memory regions mapped by a process.
  Threads
Enumerate threads.
  WinMemDump
Dump windows processes.
  TestWinMemDump
Test the pslist module.
  TestMemmap
Test the pslist module.
  TestMemmapCoalesce
Make sure that memmaps are coalesced properly.
Variables
  __package__ = 'rekall.plugins.windows'