/usr/lib/python2.7/dist-packages/rekall/plugins/addrspaces/__init__.py is in python-rekall-core 1.6.0+dfsg-2.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 | # Load the core modules
# pylint: disable=unused-import
from rekall import utils
from rekall.plugins.addrspaces import amd64
from rekall.plugins.addrspaces import arm
from rekall.plugins.addrspaces import crash
from rekall.plugins.addrspaces import elfcore
from rekall.plugins.addrspaces import ewf
from rekall.plugins.addrspaces import lime
# Remove hibernation support as an address space - its too slow to
# actually use. TODO: Convert into a plugin for being able to convert
# from a hibernation file (like imagecopy).
# from rekall.plugins.addrspaces import hibernate
from rekall.plugins.addrspaces import intel
from rekall.plugins.addrspaces import macho
from rekall.plugins.addrspaces import mips
from rekall.plugins.addrspaces import mmap_address_space
from rekall.plugins.addrspaces import pagefile
try:
from rekall.plugins.addrspaces import pmem
except ImportError:
pass
from rekall.plugins.addrspaces import standard
from rekall.plugins.addrspaces import vmem
try:
import rekall.plugins.addrspaces.accelerated
except ImportError:
pass
# If we are running on windows, load the windows specific AS.
try:
import rekall.plugins.addrspaces.win32
except ImportError:
pass
try:
import rekall.plugins.addrspaces.aff4
except ImportError:
pass
|