9fdd1c5d59
It was split in 3 modules - security/py-rekall-core : CORE component with command line interface - security/py-rekall_gui : GUI with ipython and web interface - security/py-rekall : "meta" module
10 lines
624 B
Text
10 lines
624 B
Text
The Rekall Framework is a completely open collection of tools, implemented in
|
|
Python under the GNU General Public License, for the extraction of digital
|
|
artifacts from volatile memory (RAM) samples. The extraction techniques are
|
|
performed completely independent of the system being investigated but offer
|
|
visibility into the runtime state of the system. The framework is intended to
|
|
introduce people to the techniques and complexities associated with extracting
|
|
digital artifacts from volatile memory samples and provide a platform for
|
|
further work into this exciting area of research.
|
|
|
|
WWW: http://www.rekall-forensic.com/
|