blacktop/rekall repository overview
Dockerfile
This repository contains a Dockerfile of Rekall.
Dependencies
Image Tags
REPOSITORY TAG SIZE
blacktop/rekall latest 131 MB
blacktop/rekall 1.6 131 MB
blacktop/rekall w-gui 102 MB
blacktop/rekall 1.5 102 MB
blacktop/rekall profiles 1.972 GB
NOTE: To use rekall offline use
blacktop/rekall:profiles
Installation
- Install Docker.
- Download trusted build from public Docker Registry:
docker pull blacktop/rekall
Getting Started
$ docker run --rm -v `pwd`:/data blacktop/rekall:1.5 -q --cache_dir /tmp -f silentbanker.vmem pslist
Documentation
Rekall GUI
$ docker run -d -p 80:8000 -v /path/to/mem:/data blacktop/rekall:w-gui webconsole --worksheet /tmp --host 0.0.0.0 --port 8000
To use blacktop/rekall like a host binary
Add the following to your bash or zsh profile
alias rekall='docker run -it --rm -v $(pwd):/data:rw blacktop/rekall $@'
Issues
Find a bug? Want more features? Find something missing in the documentation? Let me know! Please don't hesitate to file an issue and I'll get right on it.
CHANGELOG
See CHANGELOG.md
Contributing
See all contributors on GitHub.
Please update the CHANGELOG.md and submit a Pull Request on GitHub.
License
MIT Copyright (c) 2014-2017 blacktop
Tag summary
Content type
Image
Digest
sha256:84283611b…
Size
48.6 MB
Last updated
over 7 years ago
docker pull blacktop/rekall