py-rekall-core CORE component of the Rekall framework

1.7.2.r1.52_1 security =0 1.7.2.r1.52Version of this port present on the latest quarterly branch.

Maintainer: antoine@FreeBSD.org

Port Added: 2015-09-10 21:21:59

Last Update: 2019-08-14 13:16:13

SVN Revision: 508909

Also Listed In: python

License: GPLv2

Description:

The Rekall Framework is a completely open collection of tools, implemented in Python under the GNU General Public License, for the extraction of digital artifacts from volatile memory (RAM) samples. The extraction techniques are performed completely independent of the system being investigated but offer visibility into the runtime state of the system. The framework is intended to introduce people to the techniques and complexities associated with extracting digital artifacts from volatile memory samples and provide a platform for further work into this exciting area of research. WWW: http://www.rekall-forensic.com/

SVNWeb : Homepage

There is no configure plist information for this port.

Dependency lines:

• py36-rekall-core>0:security/py-rekall-core

To install the port: cd /usr/ports/security/py-rekall-core/ && make install clean

To add the package: pkg install py36-rekall-core

PKGNAME: py36-rekall-core

Package flavors (<flavor>: <package>)

• py36: py36-rekall-core
• py27: py27-rekall-core

distinfo:

TIMESTAMP = 1551033000 SHA256 (google-rekall-1.7.2rc1-52-g0cba831_GH0.tar.gz) = 90edf50ab2fa643b59d79839b38741e7d8efaf88b015f6886e5161feb0810f6b SIZE (google-rekall-1.7.2rc1-52-g0cba831_GH0.tar.gz) = 5560819

Dependencies

NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.

Build dependencies:

1. py36-setuptools>0 : devel/py-setuptools@py36
2. python3.6 : lang/python36

Runtime dependencies:

1. cabextract : archivers/cabextract
2. py36-yaml>=3.11 : devel/py-yaml@py36
3. py36-acora>=2.0 : textproc/py-acora@py36
4. py36-arrow>=0.10.0 : devel/py-arrow@py36
5. py36-artifacts>=20170909 : security/py-artifacts@py36
6. py36-future>=0 : devel/py-future@py36
7. py36-intervaltree>=2.1.0 : devel/py-intervaltree@py36
8. py36-ipaddr>=2.2.0 : devel/py-ipaddr@py36
9. py36-parsedatetime>=2.4 : devel/py-parsedatetime@py36
10. py36-psutil>=5.0 : sysutils/py-psutil@py36
11. py36-pyaff4>=0.25 : security/py-pyaff4@py36
12. py36-pycryptodomex>=3.4.7 : security/py-pycryptodomex@py36
13. py36-pyelftools>=0.24 : devel/py-pyelftools@py36
14. py36-pyparsing>=2.1.5 : devel/py-pyparsing@py36
15. py36-dateutil>=2.6.1 : devel/py-dateutil@py36
16. py36-pytsk>=20170802 : sysutils/py-pytsk@py36
17. py36-pytz>=2017.3,1 : devel/py-pytz@py36
18. py36-capstone>=3.0.4 : devel/py-capstone@py36
19. py36-rekall-efilter>=1.6 : devel/py-rekall-efilter@py36
20. py36-rekall_lib>=0 : security/py-rekall_lib@py36
21. py36-yara>=3.6 : security/py-yara@py36
22. py36-setuptools>0 : devel/py-setuptools@py36
23. python3.6 : lang/python36

This port is required by:

for Run

1. security/py-rekall

Configuration Options

No options to configure

USES:

python

pkg-message:

If installing:

If you want to use online profile repositories using https, make sure that root certificates from certificate authorities are installed (via ca_root_nss for instance).

Master Sites:

1. https://codeload.github.com/google/rekall/tar.gz/1.7.2rc1-52-g0cba831?dummy=/

• 2017-11-30

  Affects: */py*

  Author: mat@FreeBSD.org

  Reason: 
    Ports using Python via USES=python are now flavored.  All the py3-* ports
    have been removed and folded into their py-* master ports.
  
    People using Poudriere 3.2+ and binary packages do not have to do anything.
  
    For other people, to build the Python 3.6 version of, for example,
    databases/py-gdbm, you need to run:
  
      # make FLAVOR=py36 install
  
  

Convert to UCL & cleanup pkg-message (categories s)

Switch from pycryptodome to pycryptodomex to allow concurrent installation
with ports requiring pycrypto

Update rekall to 1.7.2rc1-52

Update to 1.7.2rc1

Convert Python ports to FLAVORS.

  Ports using USE_PYTHON=distutils are now flavored.  They will
  automatically get flavors (py27, py34, py35, py36) depending on what
  versions they support.

  There is also a USE_PYTHON=flavors for ports that do not use distutils
  but need FLAVORS to be set.  A USE_PYTHON=noflavors can be set if
  using distutils but flavors are not wanted.

  A new USE_PYTHON=optsuffix that will add PYTHON_PKGNAMESUFFIX has been
  added to cope with Python ports that did not have the Python
  PKGNAMEPREFIX but are flavored.

  USES=python now also exports a PY_FLAVOR variable that contains the

- Update py-rekall-core to 1.6.0
- Ignore py-rekall_gui: doesn't work with py-rekall-core 1.6.0 yet
- Ignore py-rekall: requires ipython 5.0.0

Allow running when openpyxl 2.4 is installed

Cleanup no longer needed CHMOD usage after r424898.

PR:		213743
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	Absolight

Update py-rekall/py-rekall-core to 1.5.2

Update to 1.5.1

Update rekall to 1.5.0

Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.

With hat:	portmgr
Sponsored by:	Absolight

Update rekall to 1.4.1
It was split in 3 modules
- security/py-rekall-core : CORE component with command line interface
- security/py-rekall_gui : GUI with ipython and web interface
- security/py-rekall : "meta" module

12 vulnerabilities affecting 34 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities

Last updated:
2019-10-11 18:37:07