system environment/kernel

Jump to letter: [ A B C D E F G H I J K L M N O P R S T U V W ]

volatility - tools for extracting digital artifacts from RAM

Website: https://github.com/volatilityfoundation/volatility
License: GPL
Vendor: Unixadm.org
Description:
The Volatility Framework  is a completely  open collection  of tools,
implemented  in Python under the GNU General Public License,  for the
extraction of digital artifacts from volatile memory (RAM) samples.

The extraction techniques are performed completely independent of the
system being investigated but  offer unprecedented visibilty into the
runtime state of the system.  The framework is intended  to introduce
people to the techniques  and complexities associated with extracting
digital artifacts from volatile memory samples and provide a platform
for further work into this exciting area of research.

Packages

volatility-2.6.1-1.el8-noarch [4.1 MiB] Changelog by Philippe Kueck (2019-10-22): 
- new upstream version
- force usage of python2
Package contents (click to display)
[f] /usr/share/man/man1/vol.1.gz
 [f] /usr/share/man/man1/volatility.1.gz
 [f] /usr/share/licenses/volatility/LEGAL.txt
 [f] /usr/share/licenses/volatility/LICENSE.txt
 [d] /usr/share/licenses/volatility
 [f] /usr/share/doc/volatility/AUTHORS.txt
 [f] /usr/share/doc/volatility/CHANGELOG.txt
 [f] /usr/share/doc/volatility/CREDITS.txt
 [f] /usr/share/doc/volatility/README.txt
 [d] /usr/share/doc/volatility
 [f] /usr/lib/python2.7/site-packages/volatility/win32/__init__.py
 [f] /usr/lib/python2.7/site-packages/volatility/win32/__init__.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/win32/__init__.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/win32/crashdump.py
 [f] /usr/lib/python2.7/site-packages/volatility/win32/crashdump.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/win32/crashdump.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/win32/domcachedump.py
 [f] /usr/lib/python2.7/site-packages/volatility/win32/domcachedump.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/win32/domcachedump.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/win32/hashdump.py
 [f] /usr/lib/python2.7/site-packages/volatility/win32/hashdump.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/win32/hashdump.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/win32/hive.py
 [f] /usr/lib/python2.7/site-packages/volatility/win32/hive.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/win32/hive.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/win32/lsasecrets.py
 [f] /usr/lib/python2.7/site-packages/volatility/win32/lsasecrets.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/win32/lsasecrets.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/win32/modules.py
 [f] /usr/lib/python2.7/site-packages/volatility/win32/modules.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/win32/modules.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/win32/network.py
 [f] /usr/lib/python2.7/site-packages/volatility/win32/network.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/win32/network.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/win32/rawreg.py
 [f] /usr/lib/python2.7/site-packages/volatility/win32/rawreg.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/win32/rawreg.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/win32/tasks.py
 [f] /usr/lib/python2.7/site-packages/volatility/win32/tasks.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/win32/tasks.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/win32/xpress.py
 [f] /usr/lib/python2.7/site-packages/volatility/win32/xpress.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/win32/xpress.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/renderers/__init__.py
 [f] /usr/lib/python2.7/site-packages/volatility/renderers/__init__.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/renderers/__init__.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/renderers/basic.py
 [f] /usr/lib/python2.7/site-packages/volatility/renderers/basic.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/renderers/basic.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/renderers/dot.py
 [f] /usr/lib/python2.7/site-packages/volatility/renderers/dot.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/renderers/dot.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/renderers/html.py
 [f] /usr/lib/python2.7/site-packages/volatility/renderers/html.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/renderers/html.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/renderers/sqlite.py
 [f] /usr/lib/python2.7/site-packages/volatility/renderers/sqlite.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/renderers/sqlite.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/renderers/text.py
 [f] /usr/lib/python2.7/site-packages/volatility/renderers/text.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/renderers/text.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/renderers/xlsx.py
 [f] /usr/lib/python2.7/site-packages/volatility/renderers/xlsx.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/renderers/xlsx.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/registry/__init__.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/registry/__init__.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/registry/__init__.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/registry/amcache.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/registry/amcache.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/registry/amcache.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/registry/auditpol.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/registry/auditpol.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/registry/auditpol.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/registry/dumpregistry.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/registry/dumpregistry.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/registry/dumpregistry.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/registry/hivelist.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/registry/hivelist.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/registry/hivelist.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/registry/hivescan.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/registry/hivescan.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/registry/hivescan.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/registry/lsadump.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/registry/lsadump.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/registry/lsadump.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/registry/printkey.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/registry/printkey.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/registry/printkey.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/registry/registryapi.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/registry/registryapi.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/registry/registryapi.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/registry/shellbags.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/registry/shellbags.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/registry/shellbags.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/registry/shimcache.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/registry/shimcache.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/registry/shimcache.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/registry/shutdown.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/registry/shutdown.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/registry/shutdown.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/registry/userassist.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/registry/userassist.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/registry/userassist.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/__init__.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/__init__.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/__init__.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/crash_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/crash_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/crash_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/hibernate_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/hibernate_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/hibernate_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/kdbg_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/kdbg_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/kdbg_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/kpcr_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/kpcr_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/kpcr_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/pe_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/pe_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/pe_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/ssdt_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/ssdt_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/ssdt_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/tcpip_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/tcpip_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/tcpip_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/vad_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/vad_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/vad_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/vista.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/vista.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/vista.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/vista_sp0_x64_syscalls.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/vista_sp0_x64_syscalls.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/vista_sp0_x64_syscalls.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/vista_sp0_x64_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/vista_sp0_x64_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/vista_sp0_x64_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/vista_sp0_x86_syscalls.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/vista_sp0_x86_syscalls.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/vista_sp0_x86_syscalls.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/vista_sp0_x86_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/vista_sp0_x86_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/vista_sp0_x86_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/vista_sp12_x64_syscalls.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/vista_sp12_x64_syscalls.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/vista_sp12_x64_syscalls.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/vista_sp12_x86_syscalls.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/vista_sp12_x86_syscalls.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/vista_sp12_x86_syscalls.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/vista_sp1_x64_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/vista_sp1_x64_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/vista_sp1_x64_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/vista_sp1_x86_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/vista_sp1_x86_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/vista_sp1_x86_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/vista_sp2_x64_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/vista_sp2_x64_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/vista_sp2_x64_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/vista_sp2_x86_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/vista_sp2_x86_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/vista_sp2_x86_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x64_10240_17770_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x64_10240_17770_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x64_10240_17770_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x64_10586_syscalls.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x64_10586_syscalls.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x64_10586_syscalls.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x64_14393_syscalls.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x64_14393_syscalls.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x64_14393_syscalls.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x64_15063_syscalls.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x64_15063_syscalls.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x64_15063_syscalls.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x64_15063_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x64_15063_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x64_15063_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x64_16299_syscalls.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x64_16299_syscalls.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x64_16299_syscalls.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x64_16299_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x64_16299_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x64_16299_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x64_17134_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x64_17134_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x64_17134_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x64_1AC738FB_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x64_1AC738FB_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x64_1AC738FB_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x64_DD08DD42_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x64_DD08DD42_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x64_DD08DD42_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x64_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x64_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x64_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x86_10240_17770_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x86_10240_17770_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x86_10240_17770_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x86_10586_syscalls.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x86_10586_syscalls.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x86_10586_syscalls.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x86_14393_syscalls.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x86_14393_syscalls.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x86_14393_syscalls.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x86_15063_syscalls.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x86_15063_syscalls.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x86_15063_syscalls.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x86_15063_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x86_15063_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x86_15063_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x86_16299_syscalls.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x86_16299_syscalls.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x86_16299_syscalls.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x86_16299_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x86_16299_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x86_16299_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x86_17134_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x86_17134_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x86_17134_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x86_44B89EEA_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x86_44B89EEA_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x86_44B89EEA_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x86_9619274A_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x86_9619274A_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x86_9619274A_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x86_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x86_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win10_x86_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win2003.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win2003.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win2003.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win2003_sp0_x86_syscalls.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win2003_sp0_x86_syscalls.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win2003_sp0_x86_syscalls.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win2003_sp0_x86_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win2003_sp0_x86_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win2003_sp0_x86_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win2003_sp12_x64_syscalls.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win2003_sp12_x64_syscalls.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win2003_sp12_x64_syscalls.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win2003_sp12_x86_syscalls.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win2003_sp12_x86_syscalls.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win2003_sp12_x86_syscalls.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win2003_sp1_x64_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win2003_sp1_x64_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win2003_sp1_x64_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win2003_sp1_x86_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win2003_sp1_x86_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win2003_sp1_x86_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win2003_sp2_x64_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win2003_sp2_x64_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win2003_sp2_x64_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win2003_sp2_x86_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win2003_sp2_x86_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win2003_sp2_x86_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win7.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win7.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win7.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win7_sp01_x64_syscalls.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win7_sp01_x64_syscalls.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win7_sp01_x64_syscalls.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win7_sp01_x86_syscalls.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win7_sp01_x86_syscalls.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win7_sp01_x86_syscalls.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win7_sp0_x64_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win7_sp0_x64_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win7_sp0_x64_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win7_sp0_x86_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win7_sp0_x86_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win7_sp0_x86_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win7_sp1_x64_24000_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win7_sp1_x64_24000_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win7_sp1_x64_24000_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win7_sp1_x64_632B36E0_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win7_sp1_x64_632B36E0_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win7_sp1_x64_632B36E0_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win7_sp1_x64_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win7_sp1_x64_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win7_sp1_x64_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win7_sp1_x86_24000_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win7_sp1_x86_24000_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win7_sp1_x86_24000_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win7_sp1_x86_BBA98F40_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win7_sp1_x86_BBA98F40_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win7_sp1_x86_BBA98F40_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win7_sp1_x86_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win7_sp1_x86_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win7_sp1_x86_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win8.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win8.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win8.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win81_u1_x64_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win81_u1_x64_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win81_u1_x64_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win81_u1_x86_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win81_u1_x86_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win81_u1_x86_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win8_kdbg.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win8_kdbg.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win8_kdbg.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win8_sp0_x64_syscalls.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win8_sp0_x64_syscalls.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win8_sp0_x64_syscalls.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win8_sp0_x64_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win8_sp0_x64_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win8_sp0_x64_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win8_sp0_x86_syscalls.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win8_sp0_x86_syscalls.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win8_sp0_x86_syscalls.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win8_sp0_x86_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win8_sp0_x86_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win8_sp0_x86_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win8_sp1_x64_54B5A1C6_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win8_sp1_x64_54B5A1C6_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win8_sp1_x64_54B5A1C6_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win8_sp1_x64_syscalls.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win8_sp1_x64_syscalls.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win8_sp1_x64_syscalls.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win8_sp1_x64_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win8_sp1_x64_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win8_sp1_x64_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win8_sp1_x86_syscalls.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win8_sp1_x86_syscalls.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win8_sp1_x86_syscalls.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win8_sp1_x86_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win8_sp1_x86_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/win8_sp1_x86_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/windows.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/windows.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/windows.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/windows64.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/windows64.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/windows64.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/xp.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/xp.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/xp.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/xp_sp2_x86_syscalls.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/xp_sp2_x86_syscalls.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/xp_sp2_x86_syscalls.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/xp_sp2_x86_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/xp_sp2_x86_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/xp_sp2_x86_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/xp_sp3_x86_vtypes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/xp_sp3_x86_vtypes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows/xp_sp3_x86_vtypes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/mac/__init__.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/mac/__init__.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/mac/__init__.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/mac/mac.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/mac/mac.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/mac/mac.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/mac/macho.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/mac/macho.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/mac/macho.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/linux/__init__.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/linux/__init__.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/linux/__init__.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/linux/elf.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/linux/elf.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/linux/elf.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/linux/linux.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/linux/linux.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/linux/linux.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/__init__.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/__init__.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/__init__.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/basic.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/basic.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/basic.pyo
 [d] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/linux
 [d] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/mac
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/native_types.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/native_types.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/native_types.pyo
 [d] /usr/lib/python2.7/site-packages/volatility/plugins/overlays/windows
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/malware/__init__.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/malware/__init__.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/malware/__init__.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/malware/apihooks.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/malware/apihooks.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/malware/apihooks.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/malware/callbacks.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/malware/callbacks.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/malware/callbacks.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/malware/cmdhistory.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/malware/cmdhistory.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/malware/cmdhistory.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/malware/devicetree.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/malware/devicetree.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/malware/devicetree.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/malware/idt.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/malware/idt.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/malware/idt.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/malware/impscan.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/malware/impscan.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/malware/impscan.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/malware/malfind.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/malware/malfind.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/malware/malfind.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/malware/psxview.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/malware/psxview.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/malware/psxview.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/malware/servicediff.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/malware/servicediff.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/malware/servicediff.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/malware/svcscan.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/malware/svcscan.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/malware/svcscan.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/malware/threads.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/malware/threads.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/malware/threads.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/malware/timers.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/malware/timers.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/malware/timers.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/WKdm.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/WKdm.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/WKdm.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/__init__.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/__init__.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/__init__.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/adiummsgs.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/adiummsgs.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/adiummsgs.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/apihooks.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/apihooks.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/apihooks.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/apihooks_kernel.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/apihooks_kernel.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/apihooks_kernel.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/arp.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/arp.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/arp.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/bash.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/bash.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/bash.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/bash_env.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/bash_env.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/bash_env.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/bash_hash.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/bash_hash.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/bash_hash.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/calendar.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/calendar.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/calendar.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/check_fop.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/check_fop.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/check_fop.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/check_mig_table.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/check_mig_table.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/check_mig_table.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/check_syscall_shadow.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/check_syscall_shadow.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/check_syscall_shadow.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/check_syscall_table.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/check_syscall_table.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/check_syscall_table.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/check_sysctl.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/check_sysctl.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/check_sysctl.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/check_trap_table.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/check_trap_table.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/check_trap_table.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/classes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/classes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/classes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/common.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/common.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/common.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/compressed_swap.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/compressed_swap.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/compressed_swap.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/contacts.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/contacts.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/contacts.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/dead_procs.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/dead_procs.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/dead_procs.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/dead_sockets.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/dead_sockets.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/dead_sockets.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/dead_vnodes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/dead_vnodes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/dead_vnodes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/devfs.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/devfs.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/devfs.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/dlyd_maps.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/dlyd_maps.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/dlyd_maps.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/dmesg.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/dmesg.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/dmesg.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/dump_files.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/dump_files.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/dump_files.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/dump_map.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/dump_map.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/dump_map.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/find_aslr_shift.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/find_aslr_shift.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/find_aslr_shift.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/get_profile.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/get_profile.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/get_profile.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/gkextmap.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/gkextmap.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/gkextmap.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/ifconfig.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/ifconfig.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/ifconfig.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/interest_handlers.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/interest_handlers.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/interest_handlers.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/ip_filters.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/ip_filters.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/ip_filters.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/kevents.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/kevents.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/kevents.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/keychaindump.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/keychaindump.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/keychaindump.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/ldrmodules.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/ldrmodules.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/ldrmodules.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/librarydump.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/librarydump.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/librarydump.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/list_files.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/list_files.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/list_files.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/list_kauth_listeners.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/list_kauth_listeners.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/list_kauth_listeners.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/list_kauth_scopes.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/list_kauth_scopes.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/list_kauth_scopes.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/list_raw.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/list_raw.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/list_raw.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/list_zones.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/list_zones.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/list_zones.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/lsmod.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/lsmod.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/lsmod.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/lsmod_iokit.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/lsmod_iokit.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/lsmod_iokit.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/lsof.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/lsof.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/lsof.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/mac_strings.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/mac_strings.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/mac_strings.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/mac_volshell.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/mac_volshell.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/mac_volshell.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/mac_yarascan.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/mac_yarascan.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/mac_yarascan.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/machine_info.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/machine_info.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/machine_info.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/malfind.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/malfind.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/malfind.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/memdump.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/memdump.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/memdump.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/moddump.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/moddump.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/moddump.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/mount.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/mount.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/mount.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/netconns.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/netconns.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/netconns.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/netstat.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/netstat.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/netstat.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/notesapp.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/notesapp.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/notesapp.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/notifiers.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/notifiers.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/notifiers.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/orphan_threads.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/orphan_threads.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/orphan_threads.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/pgrp_hash_table.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/pgrp_hash_table.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/pgrp_hash_table.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/pid_hash_table.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/pid_hash_table.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/pid_hash_table.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/print_boot_cmdline.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/print_boot_cmdline.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/print_boot_cmdline.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/proc_maps.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/proc_maps.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/proc_maps.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/procdump.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/procdump.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/procdump.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/psaux.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/psaux.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/psaux.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/psenv.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/psenv.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/psenv.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/pslist.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/pslist.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/pslist.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/pstasks.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/pstasks.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/pstasks.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/pstree.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/pstree.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/pstree.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/psxview.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/psxview.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/psxview.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/recover_filesystem.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/recover_filesystem.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/recover_filesystem.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/route.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/route.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/route.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/session_hash_table.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/session_hash_table.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/session_hash_table.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/socket_filters.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/socket_filters.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/socket_filters.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/threads.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/threads.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/threads.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/threads_simple.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/threads_simple.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/threads_simple.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/timers.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/timers.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/timers.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/trustedbsd.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/trustedbsd.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/trustedbsd.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/version.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/version.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/version.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/vfsevents.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/vfsevents.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mac/vfsevents.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/__init__.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/__init__.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/__init__.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/apihooks.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/apihooks.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/apihooks.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/arp.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/arp.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/arp.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/aslr_shift.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/aslr_shift.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/aslr_shift.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/banner.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/banner.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/banner.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/bash.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/bash.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/bash.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/bash_hash.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/bash_hash.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/bash_hash.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/check_afinfo.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/check_afinfo.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/check_afinfo.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/check_creds.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/check_creds.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/check_creds.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/check_evt_arm.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/check_evt_arm.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/check_evt_arm.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/check_fops.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/check_fops.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/check_fops.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/check_idt.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/check_idt.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/check_idt.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/check_inline_kernel.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/check_inline_kernel.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/check_inline_kernel.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/check_modules.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/check_modules.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/check_modules.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/check_syscall.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/check_syscall.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/check_syscall.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/check_syscall_arm.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/check_syscall_arm.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/check_syscall_arm.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/common.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/common.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/common.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/cpuinfo.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/cpuinfo.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/cpuinfo.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/dentry_cache.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/dentry_cache.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/dentry_cache.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/dmesg.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/dmesg.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/dmesg.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/dump_map.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/dump_map.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/dump_map.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/elfs.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/elfs.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/elfs.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/enumerate_files.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/enumerate_files.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/enumerate_files.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/find_file.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/find_file.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/find_file.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/flags.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/flags.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/flags.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/getcwd.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/getcwd.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/getcwd.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/hidden_modules.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/hidden_modules.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/hidden_modules.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/ifconfig.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/ifconfig.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/ifconfig.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/info_regs.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/info_regs.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/info_regs.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/iomem.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/iomem.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/iomem.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/kernel_opened_files.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/kernel_opened_files.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/kernel_opened_files.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/keyboard_notifiers.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/keyboard_notifiers.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/keyboard_notifiers.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/ld_env.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/ld_env.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/ld_env.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/ldrmodules.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/ldrmodules.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/ldrmodules.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/libc_env.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/libc_env.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/libc_env.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/library_list.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/library_list.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/library_list.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/librarydump.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/librarydump.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/librarydump.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/lime.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/lime.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/lime.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/linux_strings.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/linux_strings.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/linux_strings.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/linux_truecrypt.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/linux_truecrypt.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/linux_truecrypt.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/linux_volshell.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/linux_volshell.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/linux_volshell.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/linux_yarascan.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/linux_yarascan.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/linux_yarascan.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/list_raw.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/list_raw.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/list_raw.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/lsmod.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/lsmod.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/lsmod.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/lsof.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/lsof.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/lsof.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/malfind.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/malfind.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/malfind.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/mount.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/mount.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/mount.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/mount_cache.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/mount_cache.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/mount_cache.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/netfilter.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/netfilter.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/netfilter.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/netscan.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/netscan.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/netscan.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/netstat.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/netstat.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/netstat.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/pidhashtable.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/pidhashtable.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/pidhashtable.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/pkt_queues.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/pkt_queues.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/pkt_queues.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/plthook.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/plthook.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/plthook.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/proc_maps.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/proc_maps.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/proc_maps.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/proc_maps_rb.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/proc_maps_rb.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/proc_maps_rb.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/procdump.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/procdump.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/procdump.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/process_hollow.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/process_hollow.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/process_hollow.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/process_info.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/process_info.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/process_info.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/process_stack.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/process_stack.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/process_stack.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/psaux.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/psaux.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/psaux.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/psenv.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/psenv.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/psenv.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/pslist.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/pslist.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/pslist.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/pslist_cache.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/pslist_cache.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/pslist_cache.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/psscan.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/psscan.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/psscan.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/pstree.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/pstree.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/pstree.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/psxview.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/psxview.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/psxview.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/recover_filesystem.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/recover_filesystem.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/recover_filesystem.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/route_cache.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/route_cache.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/route_cache.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/sk_buff_cache.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/sk_buff_cache.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/sk_buff_cache.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/slab_info.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/slab_info.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/slab_info.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/threads.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/threads.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/threads.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/tmpfs.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/tmpfs.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/tmpfs.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/tty_check.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/tty_check.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/tty_check.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/vma_cache.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/vma_cache.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/linux/vma_cache.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/__init__.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/__init__.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/__init__.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/vista.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/vista.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/vista.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/win10.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/win10.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/win10.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/win2003.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/win2003.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/win2003.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/win7.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/win7.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/win7.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/win7_sp0_x64_vtypes_gui.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/win7_sp0_x64_vtypes_gui.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/win7_sp0_x64_vtypes_gui.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/win7_sp0_x86_vtypes_gui.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/win7_sp0_x86_vtypes_gui.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/win7_sp0_x86_vtypes_gui.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/win7_sp1_x64_vtypes_gui.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/win7_sp1_x64_vtypes_gui.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/win7_sp1_x64_vtypes_gui.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/win7_sp1_x86_vtypes_gui.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/win7_sp1_x86_vtypes_gui.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/win7_sp1_x86_vtypes_gui.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/win8.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/win8.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/win8.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/xp.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/xp.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes/xp.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/__init__.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/__init__.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/__init__.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/atoms.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/atoms.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/atoms.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/clipboard.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/clipboard.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/clipboard.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/constants.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/constants.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/constants.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/desktops.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/desktops.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/desktops.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/editbox.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/editbox.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/editbox.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/eventhooks.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/eventhooks.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/eventhooks.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/gahti.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/gahti.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/gahti.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/gditimers.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/gditimers.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/gditimers.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/messagehooks.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/messagehooks.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/messagehooks.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/screenshot.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/screenshot.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/screenshot.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/sessions.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/sessions.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/sessions.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/userhandles.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/userhandles.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/userhandles.pyo
 [d] /usr/lib/python2.7/site-packages/volatility/plugins/gui/vtypes
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/win32k_core.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/win32k_core.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/win32k_core.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/windows.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/windows.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/windows.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/windowstations.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/windowstations.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/gui/windowstations.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/__init__.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/__init__.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/__init__.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/amd64.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/amd64.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/amd64.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/arm.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/arm.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/arm.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/crash.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/crash.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/crash.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/crashbmp.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/crashbmp.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/crashbmp.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/elfcoredump.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/elfcoredump.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/elfcoredump.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/hibernate.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/hibernate.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/hibernate.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/hpak.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/hpak.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/hpak.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/ieee1394.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/ieee1394.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/ieee1394.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/intel.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/intel.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/intel.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/lime.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/lime.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/lime.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/macho.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/macho.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/macho.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/osxpmemelf.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/osxpmemelf.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/osxpmemelf.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/paged.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/paged.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/paged.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/standard.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/standard.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/standard.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/vmem.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/vmem.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/vmem.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/vmware.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/vmware.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces/vmware.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/__init__.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/__init__.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/__init__.pyo
 [d] /usr/lib/python2.7/site-packages/volatility/plugins/addrspaces
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/bigpagepools.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/bigpagepools.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/bigpagepools.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/bioskbd.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/bioskbd.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/bioskbd.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/cmdline.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/cmdline.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/cmdline.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/common.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/common.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/common.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/connections.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/connections.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/connections.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/connscan.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/connscan.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/connscan.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/crashinfo.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/crashinfo.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/crashinfo.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/dlldump.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/dlldump.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/dlldump.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/drivermodule.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/drivermodule.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/drivermodule.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/dumpcerts.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/dumpcerts.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/dumpcerts.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/dumpfiles.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/dumpfiles.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/dumpfiles.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/envars.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/envars.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/envars.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/evtlogs.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/evtlogs.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/evtlogs.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/fileparam.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/fileparam.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/fileparam.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/filescan.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/filescan.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/filescan.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/getservicesids.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/getservicesids.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/getservicesids.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/getsids.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/getsids.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/getsids.pyo
 [d] /usr/lib/python2.7/site-packages/volatility/plugins/gui
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/handles.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/handles.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/handles.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/heaps.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/heaps.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/heaps.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/hibinfo.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/hibinfo.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/hibinfo.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/hpakinfo.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/hpakinfo.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/hpakinfo.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/iehistory.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/iehistory.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/iehistory.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/imagecopy.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/imagecopy.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/imagecopy.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/imageinfo.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/imageinfo.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/imageinfo.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/joblinks.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/joblinks.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/joblinks.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/kdbgscan.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/kdbgscan.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/kdbgscan.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/kpcrscan.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/kpcrscan.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/kpcrscan.pyo
 [d] /usr/lib/python2.7/site-packages/volatility/plugins/linux
 [d] /usr/lib/python2.7/site-packages/volatility/plugins/mac
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/machoinfo.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/machoinfo.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/machoinfo.pyo
 [d] /usr/lib/python2.7/site-packages/volatility/plugins/malware
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mbrparser.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mbrparser.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mbrparser.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mftparser.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mftparser.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/mftparser.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/moddump.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/moddump.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/moddump.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/modscan.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/modscan.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/modscan.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/modules.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/modules.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/modules.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/multiscan.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/multiscan.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/multiscan.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/netscan.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/netscan.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/netscan.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/notepad.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/notepad.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/notepad.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/objtypescan.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/objtypescan.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/objtypescan.pyo
 [d] /usr/lib/python2.7/site-packages/volatility/plugins/overlays
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/patcher.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/patcher.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/patcher.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/patchguard.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/patchguard.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/patchguard.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/pooltracker.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/pooltracker.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/pooltracker.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/privileges.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/privileges.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/privileges.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/procdump.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/procdump.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/procdump.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/pstree.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/pstree.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/pstree.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/raw2dmp.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/raw2dmp.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/raw2dmp.pyo
 [d] /usr/lib/python2.7/site-packages/volatility/plugins/registry
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/sockets.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/sockets.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/sockets.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/sockscan.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/sockscan.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/sockscan.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/ssdt.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/ssdt.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/ssdt.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/strings.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/strings.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/strings.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/taskmods.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/taskmods.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/taskmods.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/tcaudit.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/tcaudit.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/tcaudit.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/timeliner.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/timeliner.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/timeliner.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/vadinfo.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/vadinfo.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/vadinfo.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/vboxinfo.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/vboxinfo.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/vboxinfo.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/verinfo.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/verinfo.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/verinfo.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/vmwareinfo.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/vmwareinfo.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/vmwareinfo.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/volshell.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/volshell.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/volshell.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/win10cookie.py
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/win10cookie.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/plugins/win10cookie.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/contrib/malware/__init__.py
 [f] /usr/lib/python2.7/site-packages/volatility/contrib/malware/__init__.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/contrib/malware/__init__.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/contrib/library_example/libapi.py
 [f] /usr/lib/python2.7/site-packages/volatility/contrib/library_example/libapi.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/contrib/library_example/libapi.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/contrib/library_example/pslist_json.py
 [f] /usr/lib/python2.7/site-packages/volatility/contrib/library_example/pslist_json.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/contrib/library_example/pslist_json.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/contrib/__init__.py
 [f] /usr/lib/python2.7/site-packages/volatility/contrib/__init__.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/contrib/__init__.pyo
 [d] /usr/lib/python2.7/site-packages/volatility/contrib/aspaces
 [f] /usr/lib/python2.7/site-packages/volatility/contrib/disablewarnings.py
 [f] /usr/lib/python2.7/site-packages/volatility/contrib/disablewarnings.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/contrib/disablewarnings.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/contrib/example.py
 [f] /usr/lib/python2.7/site-packages/volatility/contrib/example.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/contrib/example.pyo
 [d] /usr/lib/python2.7/site-packages/volatility/contrib/library_example
 [d] /usr/lib/python2.7/site-packages/volatility/contrib/malware
 [f] /usr/lib/python2.7/site-packages/volatility-2.6.1-py2.7.egg-info/PKG-INFO
 [f] /usr/lib/python2.7/site-packages/volatility-2.6.1-py2.7.egg-info/SOURCES.txt
 [f] /usr/lib/python2.7/site-packages/volatility-2.6.1-py2.7.egg-info/dependency_links.txt
 [f] /usr/lib/python2.7/site-packages/volatility-2.6.1-py2.7.egg-info/top_level.txt
 [f] /usr/lib/python2.7/site-packages/volatility/__init__.py
 [f] /usr/lib/python2.7/site-packages/volatility/__init__.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/__init__.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/addrspace.py
 [f] /usr/lib/python2.7/site-packages/volatility/addrspace.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/addrspace.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/cache.py
 [f] /usr/lib/python2.7/site-packages/volatility/cache.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/cache.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/commands.py
 [f] /usr/lib/python2.7/site-packages/volatility/commands.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/commands.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/conf.py
 [f] /usr/lib/python2.7/site-packages/volatility/conf.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/conf.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/constants.py
 [f] /usr/lib/python2.7/site-packages/volatility/constants.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/constants.pyo
 [d] /usr/lib/python2.7/site-packages/volatility/contrib
 [f] /usr/lib/python2.7/site-packages/volatility/debug.py
 [f] /usr/lib/python2.7/site-packages/volatility/debug.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/debug.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/dwarf.py
 [f] /usr/lib/python2.7/site-packages/volatility/dwarf.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/dwarf.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/exceptions.py
 [f] /usr/lib/python2.7/site-packages/volatility/exceptions.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/exceptions.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/fmtspec.py
 [f] /usr/lib/python2.7/site-packages/volatility/fmtspec.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/fmtspec.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/obj.py
 [f] /usr/lib/python2.7/site-packages/volatility/obj.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/obj.pyo
 [d] /usr/lib/python2.7/site-packages/volatility/plugins
 [f] /usr/lib/python2.7/site-packages/volatility/poolscan.py
 [f] /usr/lib/python2.7/site-packages/volatility/poolscan.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/poolscan.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/protos.py
 [f] /usr/lib/python2.7/site-packages/volatility/protos.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/protos.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/registry.py
 [f] /usr/lib/python2.7/site-packages/volatility/registry.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/registry.pyo
 [d] /usr/lib/python2.7/site-packages/volatility/renderers
 [f] /usr/lib/python2.7/site-packages/volatility/scan.py
 [f] /usr/lib/python2.7/site-packages/volatility/scan.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/scan.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/timefmt.py
 [f] /usr/lib/python2.7/site-packages/volatility/timefmt.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/timefmt.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/utils.py
 [f] /usr/lib/python2.7/site-packages/volatility/utils.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/utils.pyo
 [f] /usr/lib/python2.7/site-packages/volatility/validity.py
 [f] /usr/lib/python2.7/site-packages/volatility/validity.pyc
 [f] /usr/lib/python2.7/site-packages/volatility/validity.pyo
 [d] /usr/lib/python2.7/site-packages/volatility/win32
 [d] /usr/lib/python2.7/site-packages/volatility
 [d] /usr/lib/python2.7/site-packages/volatility-2.6.1-py2.7.egg-info
 [f] /usr/bin/vol
 [f] /usr/bin/volatility
 [f] /usr/bin/vtype_diff.py

Listing created by Repoview-0.7.0