/usr/lib/python2.7/dist-packages/rekall/plugins/windows/__init__.py is in python-rekall-core 1.6.0+dfsg-2.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 | # pylint: disable=unused-import
from rekall.plugins.windows import address_resolver
from rekall.plugins.windows import cache
from rekall.plugins.windows import common
from rekall.plugins.windows import connections
from rekall.plugins.windows import connscan
from rekall.plugins.windows import crashinfo
from rekall.plugins.windows import dns
from rekall.plugins.windows import dumpcerts
from rekall.plugins.windows import filescan
from rekall.plugins.windows import kernel
from rekall.plugins.windows import gui
from rekall.plugins.windows import handles
from rekall.plugins.windows import heap_analysis
from rekall.plugins.windows import index
from rekall.plugins.windows import interactive
from rekall.plugins.windows import kdbgscan
from rekall.plugins.windows import kpcr
from rekall.plugins.windows import malware
from rekall.plugins.windows import mimikatz
from rekall.plugins.windows import misc
from rekall.plugins.windows import modscan
from rekall.plugins.windows import modules
from rekall.plugins.windows import netscan
from rekall.plugins.windows import network
from rekall.plugins.windows import pagefile
from rekall.plugins.windows import pas2kas
from rekall.plugins.windows import pfn
from rekall.plugins.windows import pool
from rekall.plugins.windows import privileges
from rekall.plugins.windows import procdump
from rekall.plugins.windows import procinfo
from rekall.plugins.windows import pstree
from rekall.plugins.windows import registry
from rekall.plugins.windows import shimcache
#from rekall.plugins.windows import sockscan
from rekall.plugins.windows import ssdt
from rekall.plugins.windows import taskmods
from rekall.plugins.windows import vadinfo
|