D2Rekall

Executes Rekall on a system (usually a forensics workstation) and analyzes a memory dump file located on that system.

Script Data#


NameDescription
Script Typejavascript
Tagsagent, memory, forensics

Inputs#


Argument NameDescription
fileThe path to the memory dump file in the machine's filesystem.
formatThe format argument for Rekall. For example, json or text.

Outputs#


There are no outputs for this script.