/usr/lib/python2.7/dist-packages/rekall_core-1.6.0.egg-info/PKG-INFO is in python-rekall-core 1.6.0+dfsg-2.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 | Metadata-Version: 1.1
Name: rekall-core
Version: 1.6.0
Summary: Rekall Memory Forensic Framework
Home-page: https://www.rekall-forensic.com/
Author: The Rekall team
Author-email: rekall-discuss@googlegroups.com
License: GPL
Description: ================================
Rekall Memory Forensic Framework
================================
The Rekall Framework is a completely open collection of tools, implemented in
Python under the GNU General Public License, for the extraction of digital
artifacts from volatile memory (RAM) samples. The extraction techniques are
performed completely independent of the system being investigated but offer
visibilty into the runtime state of the system. The framework is intended to
introduce people to the techniques and complexities associated with extracting
digital artifacts from volatile memory samples and provide a platform for
further work into this exciting area of research.
The Rekall distribution, as well as further information is available
from: http://www.rekall-forensic.com/
Quick start
-----------
Rekall is available as a python package installable via the pip package
manager. Simply type (for example on Linux):
- sudo pip install rekall
To have all the dependencies installed. You still need to have python and pip
installed first.
To be able to run the ipython notebook, the following are also required:
- pip install Jinja2 MarkupSafe Pygments astroid pyzmq tornado wsgiref
If you want to use the yarascan plugin, install [yara and yara-python](http://plusvic.github.io/yara/).
For windows, Rekall is also available as a self contained installer
package. Please check the download page for the most appropriate installer to
use [Rekall-Forensic.com](http://www.rekall-forensic.com/)
Mailing Lists
-------------
Mailing lists to support the users and developers of Rekall
can be found at the following address:
rekall-discuss@googlegroups.com
Licensing and Copyright
-----------------------
Copyright (C) 2007-2011 Volatile Systems
Copyright 2012-2014 Google Inc. All Rights Reserved.
All Rights Reserved
This program is free software; you can redistribute it and/or
modify it under the terms of the GNU General Public License
as published by the Free Software Foundation; either version 2
of the License, or (at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program; if not, write to the Free Software
Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA
02111-1307, USA.
Bugs and Support
----------------
There is no support provided with Rekall. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR
PURPOSE.
If you think you've found a bug, please report it at:
https://github.com/google/rekall/issues
In order to help us solve your issues as quickly as possible,
please include the following information when filing a bug:
* The version of rekall you're using
* The operating system used to run rekall
* The version of python used to run rekall
* The suspected operating system of the memory image
* The complete command line you used to run rekall
Further documentation is available at
http://www.rekall-forensic.com/
Platform: UNKNOWN
Classifier: Development Status :: 4 - Beta
Classifier: Environment :: Console
Classifier: Operating System :: OS Independent
Classifier: Programming Language :: Python
|