Download Latest Version
Release 1.7.1 source code.zip (6.7 MB)
Get an email when there's a new version of Rekall
| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| Rekall_1.5.2_Furka_x64.exe | 2016-07-01 | 18.1 MB | |
| Rekall_1.5.2_Furka_x86.exe | 2016-07-01 | 16.5 MB | |
| README.md | 2016-07-01 | 691 Bytes | |
| Release 1.5.2 Furka source code.tar.gz | 2016-07-01 | 4.4 MB | |
| Release 1.5.2 Furka source code.zip | 2016-07-01 | 5.5 MB | |
| Totals: 5 Items | 44.5 MB | 0 | |
This is the next point release in the 1.5 (Furka) series.
Some highlights of this release:
- Rekall had obtained many live plugins for Incident Response:
- glob, wmi, registry yara scanning of files etc. This capability makes Rekall a capable tool for incident response and triaging.
- EFilter is now better integrated. Users can simple run SQL queries directly in the console.
- Artifact collector allows Rekall to use the forensic artifacts project (https://github.com/ForensicArtifacts/artifacts)
As always install with pip and virtualenv:
$ virtualenv /path/to/env
$ source /path/to/env/bin/activate
$ pip install --upgrade pip setuptools wheel
$ pip install rekall