[ etiona ]
[ 原始碼： rekall ]
套件： rekall-core (1.6.0+dfsg-2)
rekall-core 的相關超連結
Trisquel 的資源：
下載原始碼套件 rekall：
維護者：
Original Maintainers:
- Debian Forensics (郵件存檔)
- Hilko Bengen
- Sascha Steinbiss
外部的資源：
- 主頁 [www.rekall-forensic.com]
相似套件：
memory analysis and incident response framework
The Rekall Framework is a completely open collection of tools for the extraction and analysis of digital artifacts computer systems.
Rekall supports investigations of the following 32bit and 64bit memory images:
- Microsoft Windows XP Service Pack 2 and 3 - Microsoft Windows 7 Service Pack 0 and 1 - Microsoft Windows 8 and 8.1 - Microsoft Windows 10 - Linux Kernels 2.6.24 to 4.4. - OSX 10.7-10.12.x.
Rekall also provides a complete memory sample acquisition capability for all major operating systems.
其他與 rekall-core 有關的套件
|
|
|
-
- dep: python
- interactive high-level object-oriented language (default version)
-
- dep: python-ipython (>= 5.0.0)
- Enhanced interactive Python shell (Python 2 version)
-
- dep: python-rekall-core (= 1.6.0+dfsg-2)
- memory analysis and incident response framework -- core Python modules