The Volatility Framework is a completely open collection of tools,

implemented in Python under the GNU General Public License, for the
extraction of digital artifacts from volatile memory (RAM) samples.
The extraction techniques are performed completely independent of the
system being investigated but offer visibilty into the runtime state
of the system. The framework is intended to introduce people to the
techniques and complexities associated with extracting digital artifacts
from volatile memory samples and provide a platform for further work into
this exciting area of research.

4 files changed, 1082 insertions, 0 deletions

diff --git a/security/volatility/DESCR b/security/volatility/DESCR
new file mode 100644
index 00000000000..a5f4fd5a2d3
--- /dev/null
+++ b/security/volatility/DESCR
@@ -0,0 +1,9 @@
+The Volatility Framework is a completely open collection of tools,
+implemented in Python under the GNU General Public License, for the
+extraction of digital artifacts from volatile memory (RAM) samples.
+The extraction techniques are performed completely independent of the
+system being investigated but offer visibilty into the runtime state
+of the system. The framework is intended to introduce people to the
+techniques and complexities associated with extracting digital artifacts
+from volatile memory samples and provide a platform for further work into
+this exciting area of research.
diff --git a/security/volatility/Makefile b/security/volatility/Makefile
new file mode 100644
index 00000000000..4d6e5fb5dbe
--- /dev/null
+++ b/security/volatility/Makefile
@@ -0,0 +1,21 @@
+# $NetBSD: Makefile,v 1.1 2015/06/03 22:21:41 pettai Exp $
+
+DISTNAME=	volatility-2.4
+CATEGORIES=	security
+MASTER_SITES=	http://downloads.volatilityfoundation.org/releases/2.4/
+
+MAINTAINER=	pettai@NetBSD.org
+HOMEPAGE=	http://volatilityfoundation.org/
+COMMENT=	Volatility, Art of Memory Forensics
+LICENSE=	gnu-gpl-v2
+
+DEPENDS+=	${PYPKGPREFIX}-distorm3-[0-9]*:../../devel/py-distorm3
+
+PYDISTUTILSPKG= yes
+REPLACE_PYTHON= tools/vtype_diff.py
+
+PYTHON_VERSIONS_INCOMPATIBLE=	33 34
+
+.include "../../lang/python/extension.mk"
+.include "../../lang/python/application.mk"
+.include "../../mk/bsd.pkg.mk"
diff --git a/security/volatility/PLIST b/security/volatility/PLIST
new file mode 100644
index 00000000000..115bd3125ff
--- /dev/null
+++ b/security/volatility/PLIST
@@ -0,0 +1,1047 @@
+@comment $NetBSD: PLIST,v 1.1 2015/06/03 22:21:41 pettai Exp $
+bin/vol.py
+contrib/plugins/aspaces/__init__.py
+contrib/plugins/aspaces/ewf.py
+contrib/plugins/disablewarnings.py
+contrib/plugins/enumfunc.py
+contrib/plugins/example.py
+contrib/plugins/pagecheck.py
+contrib/plugins/psdispscan.py
+contrib/plugins/scanprof.py
+${PYSITELIB}/${PKGNAME}-py2.7.egg-info/PKG-INFO
+${PYSITELIB}/${PKGNAME}-py2.7.egg-info/SOURCES.txt
+${PYSITELIB}/${PKGNAME}-py2.7.egg-info/dependency_links.txt
+${PYSITELIB}/${PKGNAME}-py2.7.egg-info/top_level.txt
+${PYSITELIB}/volatility/__init__.py
+${PYSITELIB}/volatility/__init__.pyc
+${PYSITELIB}/volatility/__init__.pyo
+${PYSITELIB}/volatility/addrspace.py
+${PYSITELIB}/volatility/addrspace.pyc
+${PYSITELIB}/volatility/addrspace.pyo
+${PYSITELIB}/volatility/cache.py
+${PYSITELIB}/volatility/cache.pyc
+${PYSITELIB}/volatility/cache.pyo
+${PYSITELIB}/volatility/commands.py
+${PYSITELIB}/volatility/commands.pyc
+${PYSITELIB}/volatility/commands.pyo
+${PYSITELIB}/volatility/conf.py
+${PYSITELIB}/volatility/conf.pyc
+${PYSITELIB}/volatility/conf.pyo
+${PYSITELIB}/volatility/constants.py
+${PYSITELIB}/volatility/constants.pyc
+${PYSITELIB}/volatility/constants.pyo
+${PYSITELIB}/volatility/debug.py
+${PYSITELIB}/volatility/debug.pyc
+${PYSITELIB}/volatility/debug.pyo
+${PYSITELIB}/volatility/dwarf.py
+${PYSITELIB}/volatility/dwarf.pyc
+${PYSITELIB}/volatility/dwarf.pyo
+${PYSITELIB}/volatility/exceptions.py
+${PYSITELIB}/volatility/exceptions.pyc
+${PYSITELIB}/volatility/exceptions.pyo
+${PYSITELIB}/volatility/fmtspec.py
+${PYSITELIB}/volatility/fmtspec.pyc
+${PYSITELIB}/volatility/fmtspec.pyo
+${PYSITELIB}/volatility/obj.py
+${PYSITELIB}/volatility/obj.pyc
+${PYSITELIB}/volatility/obj.pyo
+${PYSITELIB}/volatility/plugins/__init__.py
+${PYSITELIB}/volatility/plugins/__init__.pyc
+${PYSITELIB}/volatility/plugins/__init__.pyo
+${PYSITELIB}/volatility/plugins/addrspaces/__init__.py
+${PYSITELIB}/volatility/plugins/addrspaces/__init__.pyc
+${PYSITELIB}/volatility/plugins/addrspaces/__init__.pyo
+${PYSITELIB}/volatility/plugins/addrspaces/amd64.py
+${PYSITELIB}/volatility/plugins/addrspaces/amd64.pyc
+${PYSITELIB}/volatility/plugins/addrspaces/amd64.pyo
+${PYSITELIB}/volatility/plugins/addrspaces/arm.py
+${PYSITELIB}/volatility/plugins/addrspaces/arm.pyc
+${PYSITELIB}/volatility/plugins/addrspaces/arm.pyo
+${PYSITELIB}/volatility/plugins/addrspaces/crash.py
+${PYSITELIB}/volatility/plugins/addrspaces/crash.pyc
+${PYSITELIB}/volatility/plugins/addrspaces/crash.pyo
+${PYSITELIB}/volatility/plugins/addrspaces/crashbmp.py
+${PYSITELIB}/volatility/plugins/addrspaces/crashbmp.pyc
+${PYSITELIB}/volatility/plugins/addrspaces/crashbmp.pyo
+${PYSITELIB}/volatility/plugins/addrspaces/elfcoredump.py
+${PYSITELIB}/volatility/plugins/addrspaces/elfcoredump.pyc
+${PYSITELIB}/volatility/plugins/addrspaces/elfcoredump.pyo
+${PYSITELIB}/volatility/plugins/addrspaces/hibernate.py
+${PYSITELIB}/volatility/plugins/addrspaces/hibernate.pyc
+${PYSITELIB}/volatility/plugins/addrspaces/hibernate.pyo
+${PYSITELIB}/volatility/plugins/addrspaces/hpak.py
+${PYSITELIB}/volatility/plugins/addrspaces/hpak.pyc
+${PYSITELIB}/volatility/plugins/addrspaces/hpak.pyo
+${PYSITELIB}/volatility/plugins/addrspaces/ieee1394.py
+${PYSITELIB}/volatility/plugins/addrspaces/ieee1394.pyc
+${PYSITELIB}/volatility/plugins/addrspaces/ieee1394.pyo
+${PYSITELIB}/volatility/plugins/addrspaces/intel.py
+${PYSITELIB}/volatility/plugins/addrspaces/intel.pyc
+${PYSITELIB}/volatility/plugins/addrspaces/intel.pyo
+${PYSITELIB}/volatility/plugins/addrspaces/lime.py
+${PYSITELIB}/volatility/plugins/addrspaces/lime.pyc
+${PYSITELIB}/volatility/plugins/addrspaces/lime.pyo
+${PYSITELIB}/volatility/plugins/addrspaces/macho.py
+${PYSITELIB}/volatility/plugins/addrspaces/macho.pyc
+${PYSITELIB}/volatility/plugins/addrspaces/macho.pyo
+${PYSITELIB}/volatility/plugins/addrspaces/osxpmemelf.py
+${PYSITELIB}/volatility/plugins/addrspaces/osxpmemelf.pyc
+${PYSITELIB}/volatility/plugins/addrspaces/osxpmemelf.pyo
+${PYSITELIB}/volatility/plugins/addrspaces/paged.py
+${PYSITELIB}/volatility/plugins/addrspaces/paged.pyc
+${PYSITELIB}/volatility/plugins/addrspaces/paged.pyo
+${PYSITELIB}/volatility/plugins/addrspaces/standard.py
+${PYSITELIB}/volatility/plugins/addrspaces/standard.pyc
+${PYSITELIB}/volatility/plugins/addrspaces/standard.pyo
+${PYSITELIB}/volatility/plugins/addrspaces/vmem.py
+${PYSITELIB}/volatility/plugins/addrspaces/vmem.pyc
+${PYSITELIB}/volatility/plugins/addrspaces/vmem.pyo
+${PYSITELIB}/volatility/plugins/addrspaces/vmware.py
+${PYSITELIB}/volatility/plugins/addrspaces/vmware.pyc
+${PYSITELIB}/volatility/plugins/addrspaces/vmware.pyo
+${PYSITELIB}/volatility/plugins/bigpagepools.py
+${PYSITELIB}/volatility/plugins/bigpagepools.pyc
+${PYSITELIB}/volatility/plugins/bigpagepools.pyo
+${PYSITELIB}/volatility/plugins/bioskbd.py
+${PYSITELIB}/volatility/plugins/bioskbd.pyc
+${PYSITELIB}/volatility/plugins/bioskbd.pyo
+${PYSITELIB}/volatility/plugins/cmdline.py
+${PYSITELIB}/volatility/plugins/cmdline.pyc
+${PYSITELIB}/volatility/plugins/cmdline.pyo
+${PYSITELIB}/volatility/plugins/common.py
+${PYSITELIB}/volatility/plugins/common.pyc
+${PYSITELIB}/volatility/plugins/common.pyo
+${PYSITELIB}/volatility/plugins/connections.py
+${PYSITELIB}/volatility/plugins/connections.pyc
+${PYSITELIB}/volatility/plugins/connections.pyo
+${PYSITELIB}/volatility/plugins/connscan.py
+${PYSITELIB}/volatility/plugins/connscan.pyc
+${PYSITELIB}/volatility/plugins/connscan.pyo
+${PYSITELIB}/volatility/plugins/crashinfo.py
+${PYSITELIB}/volatility/plugins/crashinfo.pyc
+${PYSITELIB}/volatility/plugins/crashinfo.pyo
+${PYSITELIB}/volatility/plugins/dlldump.py
+${PYSITELIB}/volatility/plugins/dlldump.pyc
+${PYSITELIB}/volatility/plugins/dlldump.pyo
+${PYSITELIB}/volatility/plugins/dumpcerts.py
+${PYSITELIB}/volatility/plugins/dumpcerts.pyc
+${PYSITELIB}/volatility/plugins/dumpcerts.pyo
+${PYSITELIB}/volatility/plugins/dumpfiles.py
+${PYSITELIB}/volatility/plugins/dumpfiles.pyc
+${PYSITELIB}/volatility/plugins/dumpfiles.pyo
+${PYSITELIB}/volatility/plugins/envars.py
+${PYSITELIB}/volatility/plugins/envars.pyc
+${PYSITELIB}/volatility/plugins/envars.pyo
+${PYSITELIB}/volatility/plugins/evtlogs.py
+${PYSITELIB}/volatility/plugins/evtlogs.pyc
+${PYSITELIB}/volatility/plugins/evtlogs.pyo
+${PYSITELIB}/volatility/plugins/fileparam.py
+${PYSITELIB}/volatility/plugins/fileparam.pyc
+${PYSITELIB}/volatility/plugins/fileparam.pyo
+${PYSITELIB}/volatility/plugins/filescan.py
+${PYSITELIB}/volatility/plugins/filescan.pyc
+${PYSITELIB}/volatility/plugins/filescan.pyo
+${PYSITELIB}/volatility/plugins/getservicesids.py
+${PYSITELIB}/volatility/plugins/getservicesids.pyc
+${PYSITELIB}/volatility/plugins/getservicesids.pyo
+${PYSITELIB}/volatility/plugins/getsids.py
+${PYSITELIB}/volatility/plugins/getsids.pyc
+${PYSITELIB}/volatility/plugins/getsids.pyo
+${PYSITELIB}/volatility/plugins/gui/__init__.py
+${PYSITELIB}/volatility/plugins/gui/__init__.pyc
+${PYSITELIB}/volatility/plugins/gui/__init__.pyo
+${PYSITELIB}/volatility/plugins/gui/atoms.py
+${PYSITELIB}/volatility/plugins/gui/atoms.pyc
+${PYSITELIB}/volatility/plugins/gui/atoms.pyo
+${PYSITELIB}/volatility/plugins/gui/clipboard.py
+${PYSITELIB}/volatility/plugins/gui/clipboard.pyc
+${PYSITELIB}/volatility/plugins/gui/clipboard.pyo
+${PYSITELIB}/volatility/plugins/gui/constants.py
+${PYSITELIB}/volatility/plugins/gui/constants.pyc
+${PYSITELIB}/volatility/plugins/gui/constants.pyo
+${PYSITELIB}/volatility/plugins/gui/desktops.py
+${PYSITELIB}/volatility/plugins/gui/desktops.pyc
+${PYSITELIB}/volatility/plugins/gui/desktops.pyo
+${PYSITELIB}/volatility/plugins/gui/eventhooks.py
+${PYSITELIB}/volatility/plugins/gui/eventhooks.pyc
+${PYSITELIB}/volatility/plugins/gui/eventhooks.pyo
+${PYSITELIB}/volatility/plugins/gui/gahti.py
+${PYSITELIB}/volatility/plugins/gui/gahti.pyc
+${PYSITELIB}/volatility/plugins/gui/gahti.pyo
+${PYSITELIB}/volatility/plugins/gui/gditimers.py
+${PYSITELIB}/volatility/plugins/gui/gditimers.pyc
+${PYSITELIB}/volatility/plugins/gui/gditimers.pyo
+${PYSITELIB}/volatility/plugins/gui/messagehooks.py
+${PYSITELIB}/volatility/plugins/gui/messagehooks.pyc
+${PYSITELIB}/volatility/plugins/gui/messagehooks.pyo
+${PYSITELIB}/volatility/plugins/gui/screenshot.py
+${PYSITELIB}/volatility/plugins/gui/screenshot.pyc
+${PYSITELIB}/volatility/plugins/gui/screenshot.pyo
+${PYSITELIB}/volatility/plugins/gui/sessions.py
+${PYSITELIB}/volatility/plugins/gui/sessions.pyc
+${PYSITELIB}/volatility/plugins/gui/sessions.pyo
+${PYSITELIB}/volatility/plugins/gui/userhandles.py
+${PYSITELIB}/volatility/plugins/gui/userhandles.pyc
+${PYSITELIB}/volatility/plugins/gui/userhandles.pyo
+${PYSITELIB}/volatility/plugins/gui/vtypes/__init__.py
+${PYSITELIB}/volatility/plugins/gui/vtypes/__init__.pyc
+${PYSITELIB}/volatility/plugins/gui/vtypes/__init__.pyo
+${PYSITELIB}/volatility/plugins/gui/vtypes/vista.py
+${PYSITELIB}/volatility/plugins/gui/vtypes/vista.pyc
+${PYSITELIB}/volatility/plugins/gui/vtypes/vista.pyo
+${PYSITELIB}/volatility/plugins/gui/vtypes/win2003.py
+${PYSITELIB}/volatility/plugins/gui/vtypes/win2003.pyc
+${PYSITELIB}/volatility/plugins/gui/vtypes/win2003.pyo
+${PYSITELIB}/volatility/plugins/gui/vtypes/win7.py
+${PYSITELIB}/volatility/plugins/gui/vtypes/win7.pyc
+${PYSITELIB}/volatility/plugins/gui/vtypes/win7.pyo
+${PYSITELIB}/volatility/plugins/gui/vtypes/win7_sp0_x64_vtypes_gui.py
+${PYSITELIB}/volatility/plugins/gui/vtypes/win7_sp0_x64_vtypes_gui.pyc
+${PYSITELIB}/volatility/plugins/gui/vtypes/win7_sp0_x64_vtypes_gui.pyo
+${PYSITELIB}/volatility/plugins/gui/vtypes/win7_sp0_x86_vtypes_gui.py
+${PYSITELIB}/volatility/plugins/gui/vtypes/win7_sp0_x86_vtypes_gui.pyc
+${PYSITELIB}/volatility/plugins/gui/vtypes/win7_sp0_x86_vtypes_gui.pyo
+${PYSITELIB}/volatility/plugins/gui/vtypes/win7_sp1_x64_vtypes_gui.py
+${PYSITELIB}/volatility/plugins/gui/vtypes/win7_sp1_x64_vtypes_gui.pyc
+${PYSITELIB}/volatility/plugins/gui/vtypes/win7_sp1_x64_vtypes_gui.pyo
+${PYSITELIB}/volatility/plugins/gui/vtypes/win7_sp1_x86_vtypes_gui.py
+${PYSITELIB}/volatility/plugins/gui/vtypes/win7_sp1_x86_vtypes_gui.pyc
+${PYSITELIB}/volatility/plugins/gui/vtypes/win7_sp1_x86_vtypes_gui.pyo
+${PYSITELIB}/volatility/plugins/gui/vtypes/win8.py
+${PYSITELIB}/volatility/plugins/gui/vtypes/win8.pyc
+${PYSITELIB}/volatility/plugins/gui/vtypes/win8.pyo
+${PYSITELIB}/volatility/plugins/gui/vtypes/xp.py
+${PYSITELIB}/volatility/plugins/gui/vtypes/xp.pyc
+${PYSITELIB}/volatility/plugins/gui/vtypes/xp.pyo
+${PYSITELIB}/volatility/plugins/gui/win32k_core.py
+${PYSITELIB}/volatility/plugins/gui/win32k_core.pyc
+${PYSITELIB}/volatility/plugins/gui/win32k_core.pyo
+${PYSITELIB}/volatility/plugins/gui/windows.py
+${PYSITELIB}/volatility/plugins/gui/windows.pyc
+${PYSITELIB}/volatility/plugins/gui/windows.pyo
+${PYSITELIB}/volatility/plugins/gui/windowstations.py
+${PYSITELIB}/volatility/plugins/gui/windowstations.pyc
+${PYSITELIB}/volatility/plugins/gui/windowstations.pyo
+${PYSITELIB}/volatility/plugins/handles.py
+${PYSITELIB}/volatility/plugins/handles.pyc
+${PYSITELIB}/volatility/plugins/handles.pyo
+${PYSITELIB}/volatility/plugins/heaps.py
+${PYSITELIB}/volatility/plugins/heaps.pyc
+${PYSITELIB}/volatility/plugins/heaps.pyo
+${PYSITELIB}/volatility/plugins/hibinfo.py
+${PYSITELIB}/volatility/plugins/hibinfo.pyc
+${PYSITELIB}/volatility/plugins/hibinfo.pyo
+${PYSITELIB}/volatility/plugins/hpakinfo.py
+${PYSITELIB}/volatility/plugins/hpakinfo.pyc
+${PYSITELIB}/volatility/plugins/hpakinfo.pyo
+${PYSITELIB}/volatility/plugins/iehistory.py
+${PYSITELIB}/volatility/plugins/iehistory.pyc
+${PYSITELIB}/volatility/plugins/iehistory.pyo
+${PYSITELIB}/volatility/plugins/imagecopy.py
+${PYSITELIB}/volatility/plugins/imagecopy.pyc
+${PYSITELIB}/volatility/plugins/imagecopy.pyo
+${PYSITELIB}/volatility/plugins/imageinfo.py
+${PYSITELIB}/volatility/plugins/imageinfo.pyc
+${PYSITELIB}/volatility/plugins/imageinfo.pyo
+${PYSITELIB}/volatility/plugins/joblinks.py
+${PYSITELIB}/volatility/plugins/joblinks.pyc
+${PYSITELIB}/volatility/plugins/joblinks.pyo
+${PYSITELIB}/volatility/plugins/kdbgscan.py
+${PYSITELIB}/volatility/plugins/kdbgscan.pyc
+${PYSITELIB}/volatility/plugins/kdbgscan.pyo
+${PYSITELIB}/volatility/plugins/kpcrscan.py
+${PYSITELIB}/volatility/plugins/kpcrscan.pyc
+${PYSITELIB}/volatility/plugins/kpcrscan.pyo
+${PYSITELIB}/volatility/plugins/linux/__init__.py
+${PYSITELIB}/volatility/plugins/linux/__init__.pyc
+${PYSITELIB}/volatility/plugins/linux/__init__.pyo
+${PYSITELIB}/volatility/plugins/linux/apihooks.py
+${PYSITELIB}/volatility/plugins/linux/apihooks.pyc
+${PYSITELIB}/volatility/plugins/linux/apihooks.pyo
+${PYSITELIB}/volatility/plugins/linux/arp.py
+${PYSITELIB}/volatility/plugins/linux/arp.pyc
+${PYSITELIB}/volatility/plugins/linux/arp.pyo
+${PYSITELIB}/volatility/plugins/linux/banner.py
+${PYSITELIB}/volatility/plugins/linux/banner.pyc
+${PYSITELIB}/volatility/plugins/linux/banner.pyo
+${PYSITELIB}/volatility/plugins/linux/bash.py
+${PYSITELIB}/volatility/plugins/linux/bash.pyc
+${PYSITELIB}/volatility/plugins/linux/bash.pyo
+${PYSITELIB}/volatility/plugins/linux/bash_hash.py
+${PYSITELIB}/volatility/plugins/linux/bash_hash.pyc
+${PYSITELIB}/volatility/plugins/linux/bash_hash.pyo
+${PYSITELIB}/volatility/plugins/linux/check_afinfo.py
+${PYSITELIB}/volatility/plugins/linux/check_afinfo.pyc
+${PYSITELIB}/volatility/plugins/linux/check_afinfo.pyo
+${PYSITELIB}/volatility/plugins/linux/check_creds.py
+${PYSITELIB}/volatility/plugins/linux/check_creds.pyc
+${PYSITELIB}/volatility/plugins/linux/check_creds.pyo
+${PYSITELIB}/volatility/plugins/linux/check_evt_arm.py
+${PYSITELIB}/volatility/plugins/linux/check_evt_arm.pyc
+${PYSITELIB}/volatility/plugins/linux/check_evt_arm.pyo
+${PYSITELIB}/volatility/plugins/linux/check_fops.py
+${PYSITELIB}/volatility/plugins/linux/check_fops.pyc
+${PYSITELIB}/volatility/plugins/linux/check_fops.pyo
+${PYSITELIB}/volatility/plugins/linux/check_idt.py
+${PYSITELIB}/volatility/plugins/linux/check_idt.pyc
+${PYSITELIB}/volatility/plugins/linux/check_idt.pyo
+${PYSITELIB}/volatility/plugins/linux/check_inline_kernel.py
+${PYSITELIB}/volatility/plugins/linux/check_inline_kernel.pyc
+${PYSITELIB}/volatility/plugins/linux/check_inline_kernel.pyo
+${PYSITELIB}/volatility/plugins/linux/check_modules.py
+${PYSITELIB}/volatility/plugins/linux/check_modules.pyc
+${PYSITELIB}/volatility/plugins/linux/check_modules.pyo
+${PYSITELIB}/volatility/plugins/linux/check_syscall.py
+${PYSITELIB}/volatility/plugins/linux/check_syscall.pyc
+${PYSITELIB}/volatility/plugins/linux/check_syscall.pyo
+${PYSITELIB}/volatility/plugins/linux/check_syscall_arm.py
+${PYSITELIB}/volatility/plugins/linux/check_syscall_arm.pyc
+${PYSITELIB}/volatility/plugins/linux/check_syscall_arm.pyo
+${PYSITELIB}/volatility/plugins/linux/common.py
+${PYSITELIB}/volatility/plugins/linux/common.pyc
+${PYSITELIB}/volatility/plugins/linux/common.pyo
+${PYSITELIB}/volatility/plugins/linux/cpuinfo.py
+${PYSITELIB}/volatility/plugins/linux/cpuinfo.pyc
+${PYSITELIB}/volatility/plugins/linux/cpuinfo.pyo
+${PYSITELIB}/volatility/plugins/linux/dentry_cache.py
+${PYSITELIB}/volatility/plugins/linux/dentry_cache.pyc
+${PYSITELIB}/volatility/plugins/linux/dentry_cache.pyo
+${PYSITELIB}/volatility/plugins/linux/dmesg.py
+${PYSITELIB}/volatility/plugins/linux/dmesg.pyc
+${PYSITELIB}/volatility/plugins/linux/dmesg.pyo
+${PYSITELIB}/volatility/plugins/linux/dump_map.py
+${PYSITELIB}/volatility/plugins/linux/dump_map.pyc
+${PYSITELIB}/volatility/plugins/linux/dump_map.pyo
+${PYSITELIB}/volatility/plugins/linux/elfs.py
+${PYSITELIB}/volatility/plugins/linux/elfs.pyc
+${PYSITELIB}/volatility/plugins/linux/elfs.pyo
+${PYSITELIB}/volatility/plugins/linux/enumerate_files.py
+${PYSITELIB}/volatility/plugins/linux/enumerate_files.pyc
+${PYSITELIB}/volatility/plugins/linux/enumerate_files.pyo
+${PYSITELIB}/volatility/plugins/linux/find_file.py
+${PYSITELIB}/volatility/plugins/linux/find_file.pyc
+${PYSITELIB}/volatility/plugins/linux/find_file.pyo
+${PYSITELIB}/volatility/plugins/linux/flags.py
+${PYSITELIB}/volatility/plugins/linux/flags.pyc
+${PYSITELIB}/volatility/plugins/linux/flags.pyo
+${PYSITELIB}/volatility/plugins/linux/hidden_modules.py
+${PYSITELIB}/volatility/plugins/linux/hidden_modules.pyc
+${PYSITELIB}/volatility/plugins/linux/hidden_modules.pyo
+${PYSITELIB}/volatility/plugins/linux/ifconfig.py
+${PYSITELIB}/volatility/plugins/linux/ifconfig.pyc
+${PYSITELIB}/volatility/plugins/linux/ifconfig.pyo
+${PYSITELIB}/volatility/plugins/linux/info_regs.py
+${PYSITELIB}/volatility/plugins/linux/info_regs.pyc
+${PYSITELIB}/volatility/plugins/linux/info_regs.pyo
+${PYSITELIB}/volatility/plugins/linux/iomem.py
+${PYSITELIB}/volatility/plugins/linux/iomem.pyc
+${PYSITELIB}/volatility/plugins/linux/iomem.pyo
+${PYSITELIB}/volatility/plugins/linux/kernel_opened_files.py
+${PYSITELIB}/volatility/plugins/linux/kernel_opened_files.pyc
+${PYSITELIB}/volatility/plugins/linux/kernel_opened_files.pyo
+${PYSITELIB}/volatility/plugins/linux/keyboard_notifiers.py
+${PYSITELIB}/volatility/plugins/linux/keyboard_notifiers.pyc
+${PYSITELIB}/volatility/plugins/linux/keyboard_notifiers.pyo
+${PYSITELIB}/volatility/plugins/linux/ldrmodules.py
+${PYSITELIB}/volatility/plugins/linux/ldrmodules.pyc
+${PYSITELIB}/volatility/plugins/linux/ldrmodules.pyo
+${PYSITELIB}/volatility/plugins/linux/libc_env.py
+${PYSITELIB}/volatility/plugins/linux/libc_env.pyc
+${PYSITELIB}/volatility/plugins/linux/libc_env.pyo
+${PYSITELIB}/volatility/plugins/linux/library_list.py
+${PYSITELIB}/volatility/plugins/linux/library_list.pyc
+${PYSITELIB}/volatility/plugins/linux/library_list.pyo
+${PYSITELIB}/volatility/plugins/linux/librarydump.py
+${PYSITELIB}/volatility/plugins/linux/librarydump.pyc
+${PYSITELIB}/volatility/plugins/linux/librarydump.pyo
+${PYSITELIB}/volatility/plugins/linux/lime.py
+${PYSITELIB}/volatility/plugins/linux/lime.pyc
+${PYSITELIB}/volatility/plugins/linux/lime.pyo
+${PYSITELIB}/volatility/plugins/linux/linux_strings.py
+${PYSITELIB}/volatility/plugins/linux/linux_strings.pyc
+${PYSITELIB}/volatility/plugins/linux/linux_strings.pyo
+${PYSITELIB}/volatility/plugins/linux/linux_truecrypt.py
+${PYSITELIB}/volatility/plugins/linux/linux_truecrypt.pyc
+${PYSITELIB}/volatility/plugins/linux/linux_truecrypt.pyo
+${PYSITELIB}/volatility/plugins/linux/linux_volshell.py
+${PYSITELIB}/volatility/plugins/linux/linux_volshell.pyc
+${PYSITELIB}/volatility/plugins/linux/linux_volshell.pyo
+${PYSITELIB}/volatility/plugins/linux/linux_yarascan.py
+${PYSITELIB}/volatility/plugins/linux/linux_yarascan.pyc
+${PYSITELIB}/volatility/plugins/linux/linux_yarascan.pyo
+${PYSITELIB}/volatility/plugins/linux/list_raw.py
+${PYSITELIB}/volatility/plugins/linux/list_raw.pyc
+${PYSITELIB}/volatility/plugins/linux/list_raw.pyo
+${PYSITELIB}/volatility/plugins/linux/lsmod.py
+${PYSITELIB}/volatility/plugins/linux/lsmod.pyc
+${PYSITELIB}/volatility/plugins/linux/lsmod.pyo
+${PYSITELIB}/volatility/plugins/linux/lsof.py
+${PYSITELIB}/volatility/plugins/linux/lsof.pyc
+${PYSITELIB}/volatility/plugins/linux/lsof.pyo
+${PYSITELIB}/volatility/plugins/linux/malfind.py
+${PYSITELIB}/volatility/plugins/linux/malfind.pyc
+${PYSITELIB}/volatility/plugins/linux/malfind.pyo
+${PYSITELIB}/volatility/plugins/linux/mount.py
+${PYSITELIB}/volatility/plugins/linux/mount.pyc
+${PYSITELIB}/volatility/plugins/linux/mount.pyo
+${PYSITELIB}/volatility/plugins/linux/mount_cache.py
+${PYSITELIB}/volatility/plugins/linux/mount_cache.pyc
+${PYSITELIB}/volatility/plugins/linux/mount_cache.pyo
+${PYSITELIB}/volatility/plugins/linux/netfiler.py
+${PYSITELIB}/volatility/plugins/linux/netfiler.pyc
+${PYSITELIB}/volatility/plugins/linux/netfiler.pyo
+${PYSITELIB}/volatility/plugins/linux/netstat.py
+${PYSITELIB}/volatility/plugins/linux/netstat.pyc
+${PYSITELIB}/volatility/plugins/linux/netstat.pyo
+${PYSITELIB}/volatility/plugins/linux/pidhashtable.py
+${PYSITELIB}/volatility/plugins/linux/pidhashtable.pyc
+${PYSITELIB}/volatility/plugins/linux/pidhashtable.pyo
+${PYSITELIB}/volatility/plugins/linux/pkt_queues.py
+${PYSITELIB}/volatility/plugins/linux/pkt_queues.pyc
+${PYSITELIB}/volatility/plugins/linux/pkt_queues.pyo
+${PYSITELIB}/volatility/plugins/linux/plthook.py
+${PYSITELIB}/volatility/plugins/linux/plthook.pyc
+${PYSITELIB}/volatility/plugins/linux/plthook.pyo
+${PYSITELIB}/volatility/plugins/linux/proc_maps.py
+${PYSITELIB}/volatility/plugins/linux/proc_maps.pyc
+${PYSITELIB}/volatility/plugins/linux/proc_maps.pyo
+${PYSITELIB}/volatility/plugins/linux/proc_maps_rb.py
+${PYSITELIB}/volatility/plugins/linux/proc_maps_rb.pyc
+${PYSITELIB}/volatility/plugins/linux/proc_maps_rb.pyo
+${PYSITELIB}/volatility/plugins/linux/procdump.py
+${PYSITELIB}/volatility/plugins/linux/procdump.pyc
+${PYSITELIB}/volatility/plugins/linux/procdump.pyo
+${PYSITELIB}/volatility/plugins/linux/process_hollow.py
+${PYSITELIB}/volatility/plugins/linux/process_hollow.pyc
+${PYSITELIB}/volatility/plugins/linux/process_hollow.pyo
+${PYSITELIB}/volatility/plugins/linux/process_info.py
+${PYSITELIB}/volatility/plugins/linux/process_info.pyc
+${PYSITELIB}/volatility/plugins/linux/process_info.pyo
+${PYSITELIB}/volatility/plugins/linux/process_stack.py
+${PYSITELIB}/volatility/plugins/linux/process_stack.pyc
+${PYSITELIB}/volatility/plugins/linux/process_stack.pyo
+${PYSITELIB}/volatility/plugins/linux/psaux.py
+${PYSITELIB}/volatility/plugins/linux/psaux.pyc
+${PYSITELIB}/volatility/plugins/linux/psaux.pyo
+${PYSITELIB}/volatility/plugins/linux/psenv.py
+${PYSITELIB}/volatility/plugins/linux/psenv.pyc
+${PYSITELIB}/volatility/plugins/linux/psenv.pyo
+${PYSITELIB}/volatility/plugins/linux/pslist.py
+${PYSITELIB}/volatility/plugins/linux/pslist.pyc
+${PYSITELIB}/volatility/plugins/linux/pslist.pyo
+${PYSITELIB}/volatility/plugins/linux/pslist_cache.py
+${PYSITELIB}/volatility/plugins/linux/pslist_cache.pyc
+${PYSITELIB}/volatility/plugins/linux/pslist_cache.pyo
+${PYSITELIB}/volatility/plugins/linux/pstree.py
+${PYSITELIB}/volatility/plugins/linux/pstree.pyc
+${PYSITELIB}/volatility/plugins/linux/pstree.pyo
+${PYSITELIB}/volatility/plugins/linux/psxview.py
+${PYSITELIB}/volatility/plugins/linux/psxview.pyc
+${PYSITELIB}/volatility/plugins/linux/psxview.pyo
+${PYSITELIB}/volatility/plugins/linux/recover_filesystem.py
+${PYSITELIB}/volatility/plugins/linux/recover_filesystem.pyc
+${PYSITELIB}/volatility/plugins/linux/recover_filesystem.pyo
+${PYSITELIB}/volatility/plugins/linux/route_cache.py
+${PYSITELIB}/volatility/plugins/linux/route_cache.pyc
+${PYSITELIB}/volatility/plugins/linux/route_cache.pyo
+${PYSITELIB}/volatility/plugins/linux/sk_buff_cache.py
+${PYSITELIB}/volatility/plugins/linux/sk_buff_cache.pyc
+${PYSITELIB}/volatility/plugins/linux/sk_buff_cache.pyo
+${PYSITELIB}/volatility/plugins/linux/slab_info.py
+${PYSITELIB}/volatility/plugins/linux/slab_info.pyc
+${PYSITELIB}/volatility/plugins/linux/slab_info.pyo
+${PYSITELIB}/volatility/plugins/linux/threads.py
+${PYSITELIB}/volatility/plugins/linux/threads.pyc
+${PYSITELIB}/volatility/plugins/linux/threads.pyo
+${PYSITELIB}/volatility/plugins/linux/tmpfs.py
+${PYSITELIB}/volatility/plugins/linux/tmpfs.pyc
+${PYSITELIB}/volatility/plugins/linux/tmpfs.pyo
+${PYSITELIB}/volatility/plugins/linux/tty_check.py
+${PYSITELIB}/volatility/plugins/linux/tty_check.pyc
+${PYSITELIB}/volatility/plugins/linux/tty_check.pyo
+${PYSITELIB}/volatility/plugins/linux/vma_cache.py
+${PYSITELIB}/volatility/plugins/linux/vma_cache.pyc
+${PYSITELIB}/volatility/plugins/linux/vma_cache.pyo
+${PYSITELIB}/volatility/plugins/mac/__init__.py
+${PYSITELIB}/volatility/plugins/mac/__init__.pyc
+${PYSITELIB}/volatility/plugins/mac/__init__.pyo
+${PYSITELIB}/volatility/plugins/mac/adiummsgs.py
+${PYSITELIB}/volatility/plugins/mac/adiummsgs.pyc
+${PYSITELIB}/volatility/plugins/mac/adiummsgs.pyo
+${PYSITELIB}/volatility/plugins/mac/apihooks.py
+${PYSITELIB}/volatility/plugins/mac/apihooks.pyc
+${PYSITELIB}/volatility/plugins/mac/apihooks.pyo
+${PYSITELIB}/volatility/plugins/mac/apihooks_kernel.py
+${PYSITELIB}/volatility/plugins/mac/apihooks_kernel.pyc
+${PYSITELIB}/volatility/plugins/mac/apihooks_kernel.pyo
+${PYSITELIB}/volatility/plugins/mac/arp.py
+${PYSITELIB}/volatility/plugins/mac/arp.pyc
+${PYSITELIB}/volatility/plugins/mac/arp.pyo
+${PYSITELIB}/volatility/plugins/mac/bash.py
+${PYSITELIB}/volatility/plugins/mac/bash.pyc
+${PYSITELIB}/volatility/plugins/mac/bash.pyo
+${PYSITELIB}/volatility/plugins/mac/bash_env.py
+${PYSITELIB}/volatility/plugins/mac/bash_env.pyc
+${PYSITELIB}/volatility/plugins/mac/bash_env.pyo
+${PYSITELIB}/volatility/plugins/mac/bash_hash.py
+${PYSITELIB}/volatility/plugins/mac/bash_hash.pyc
+${PYSITELIB}/volatility/plugins/mac/bash_hash.pyo
+${PYSITELIB}/volatility/plugins/mac/calendar.py
+${PYSITELIB}/volatility/plugins/mac/calendar.pyc
+${PYSITELIB}/volatility/plugins/mac/calendar.pyo
+${PYSITELIB}/volatility/plugins/mac/check_mig_table.py
+${PYSITELIB}/volatility/plugins/mac/check_mig_table.pyc
+${PYSITELIB}/volatility/plugins/mac/check_mig_table.pyo
+${PYSITELIB}/volatility/plugins/mac/check_syscall_shadow.py
+${PYSITELIB}/volatility/plugins/mac/check_syscall_shadow.pyc
+${PYSITELIB}/volatility/plugins/mac/check_syscall_shadow.pyo
+${PYSITELIB}/volatility/plugins/mac/check_syscall_table.py
+${PYSITELIB}/volatility/plugins/mac/check_syscall_table.pyc
+${PYSITELIB}/volatility/plugins/mac/check_syscall_table.pyo
+${PYSITELIB}/volatility/plugins/mac/check_sysctl.py
+${PYSITELIB}/volatility/plugins/mac/check_sysctl.pyc
+${PYSITELIB}/volatility/plugins/mac/check_sysctl.pyo
+${PYSITELIB}/volatility/plugins/mac/check_trap_table.py
+${PYSITELIB}/volatility/plugins/mac/check_trap_table.pyc
+${PYSITELIB}/volatility/plugins/mac/check_trap_table.pyo
+${PYSITELIB}/volatility/plugins/mac/common.py
+${PYSITELIB}/volatility/plugins/mac/common.pyc
+${PYSITELIB}/volatility/plugins/mac/common.pyo
+${PYSITELIB}/volatility/plugins/mac/contacts.py
+${PYSITELIB}/volatility/plugins/mac/contacts.pyc
+${PYSITELIB}/volatility/plugins/mac/contacts.pyo
+${PYSITELIB}/volatility/plugins/mac/dead_procs.py
+${PYSITELIB}/volatility/plugins/mac/dead_procs.pyc
+${PYSITELIB}/volatility/plugins/mac/dead_procs.pyo
+${PYSITELIB}/volatility/plugins/mac/dead_sockets.py
+${PYSITELIB}/volatility/plugins/mac/dead_sockets.pyc
+${PYSITELIB}/volatility/plugins/mac/dead_sockets.pyo
+${PYSITELIB}/volatility/plugins/mac/dead_vnodes.py
+${PYSITELIB}/volatility/plugins/mac/dead_vnodes.pyc
+${PYSITELIB}/volatility/plugins/mac/dead_vnodes.pyo
+${PYSITELIB}/volatility/plugins/mac/dlyd_maps.py
+${PYSITELIB}/volatility/plugins/mac/dlyd_maps.pyc
+${PYSITELIB}/volatility/plugins/mac/dlyd_maps.pyo
+${PYSITELIB}/volatility/plugins/mac/dmesg.py
+${PYSITELIB}/volatility/plugins/mac/dmesg.pyc
+${PYSITELIB}/volatility/plugins/mac/dmesg.pyo
+${PYSITELIB}/volatility/plugins/mac/dump_files.py
+${PYSITELIB}/volatility/plugins/mac/dump_files.pyc
+${PYSITELIB}/volatility/plugins/mac/dump_files.pyo
+${PYSITELIB}/volatility/plugins/mac/dump_map.py
+${PYSITELIB}/volatility/plugins/mac/dump_map.pyc
+${PYSITELIB}/volatility/plugins/mac/dump_map.pyo
+${PYSITELIB}/volatility/plugins/mac/find_aslr_shift.py
+${PYSITELIB}/volatility/plugins/mac/find_aslr_shift.pyc
+${PYSITELIB}/volatility/plugins/mac/find_aslr_shift.pyo
+${PYSITELIB}/volatility/plugins/mac/gkextmap.py
+${PYSITELIB}/volatility/plugins/mac/gkextmap.pyc
+${PYSITELIB}/volatility/plugins/mac/gkextmap.pyo
+${PYSITELIB}/volatility/plugins/mac/ifconfig.py
+${PYSITELIB}/volatility/plugins/mac/ifconfig.pyc
+${PYSITELIB}/volatility/plugins/mac/ifconfig.pyo
+${PYSITELIB}/volatility/plugins/mac/ip_filters.py
+${PYSITELIB}/volatility/plugins/mac/ip_filters.pyc
+${PYSITELIB}/volatility/plugins/mac/ip_filters.pyo
+${PYSITELIB}/volatility/plugins/mac/keychaindump.py
+${PYSITELIB}/volatility/plugins/mac/keychaindump.pyc
+${PYSITELIB}/volatility/plugins/mac/keychaindump.pyo
+${PYSITELIB}/volatility/plugins/mac/ldrmodules.py
+${PYSITELIB}/volatility/plugins/mac/ldrmodules.pyc
+${PYSITELIB}/volatility/plugins/mac/ldrmodules.pyo
+${PYSITELIB}/volatility/plugins/mac/librarydump.py
+${PYSITELIB}/volatility/plugins/mac/librarydump.pyc
+${PYSITELIB}/volatility/plugins/mac/librarydump.pyo
+${PYSITELIB}/volatility/plugins/mac/list_files.py
+${PYSITELIB}/volatility/plugins/mac/list_files.pyc
+${PYSITELIB}/volatility/plugins/mac/list_files.pyo
+${PYSITELIB}/volatility/plugins/mac/list_zones.py
+${PYSITELIB}/volatility/plugins/mac/list_zones.pyc
+${PYSITELIB}/volatility/plugins/mac/list_zones.pyo
+${PYSITELIB}/volatility/plugins/mac/lsmod.py
+${PYSITELIB}/volatility/plugins/mac/lsmod.pyc
+${PYSITELIB}/volatility/plugins/mac/lsmod.pyo
+${PYSITELIB}/volatility/plugins/mac/lsmod_iokit.py
+${PYSITELIB}/volatility/plugins/mac/lsmod_iokit.pyc
+${PYSITELIB}/volatility/plugins/mac/lsmod_iokit.pyo
+${PYSITELIB}/volatility/plugins/mac/lsof.py
+${PYSITELIB}/volatility/plugins/mac/lsof.pyc
+${PYSITELIB}/volatility/plugins/mac/lsof.pyo
+${PYSITELIB}/volatility/plugins/mac/mac_strings.py
+${PYSITELIB}/volatility/plugins/mac/mac_strings.pyc
+${PYSITELIB}/volatility/plugins/mac/mac_strings.pyo
+${PYSITELIB}/volatility/plugins/mac/mac_volshell.py
+${PYSITELIB}/volatility/plugins/mac/mac_volshell.pyc
+${PYSITELIB}/volatility/plugins/mac/mac_volshell.pyo
+${PYSITELIB}/volatility/plugins/mac/mac_yarascan.py
+${PYSITELIB}/volatility/plugins/mac/mac_yarascan.pyc
+${PYSITELIB}/volatility/plugins/mac/mac_yarascan.pyo
+${PYSITELIB}/volatility/plugins/mac/machine_info.py
+${PYSITELIB}/volatility/plugins/mac/machine_info.pyc
+${PYSITELIB}/volatility/plugins/mac/machine_info.pyo
+${PYSITELIB}/volatility/plugins/mac/malfind.py
+${PYSITELIB}/volatility/plugins/mac/malfind.pyc
+${PYSITELIB}/volatility/plugins/mac/malfind.pyo
+${PYSITELIB}/volatility/plugins/mac/memdump.py
+${PYSITELIB}/volatility/plugins/mac/memdump.pyc
+${PYSITELIB}/volatility/plugins/mac/memdump.pyo
+${PYSITELIB}/volatility/plugins/mac/moddump.py
+${PYSITELIB}/volatility/plugins/mac/moddump.pyc
+${PYSITELIB}/volatility/plugins/mac/moddump.pyo
+${PYSITELIB}/volatility/plugins/mac/mount.py
+${PYSITELIB}/volatility/plugins/mac/mount.pyc
+${PYSITELIB}/volatility/plugins/mac/mount.pyo
+${PYSITELIB}/volatility/plugins/mac/netconns.py
+${PYSITELIB}/volatility/plugins/mac/netconns.pyc
+${PYSITELIB}/volatility/plugins/mac/netconns.pyo
+${PYSITELIB}/volatility/plugins/mac/netstat.py
+${PYSITELIB}/volatility/plugins/mac/netstat.pyc
+${PYSITELIB}/volatility/plugins/mac/netstat.pyo
+${PYSITELIB}/volatility/plugins/mac/notesapp.py
+${PYSITELIB}/volatility/plugins/mac/notesapp.pyc
+${PYSITELIB}/volatility/plugins/mac/notesapp.pyo
+${PYSITELIB}/volatility/plugins/mac/notifiers.py
+${PYSITELIB}/volatility/plugins/mac/notifiers.pyc
+${PYSITELIB}/volatility/plugins/mac/notifiers.pyo
+${PYSITELIB}/volatility/plugins/mac/pgrp_hash_table.py
+${PYSITELIB}/volatility/plugins/mac/pgrp_hash_table.pyc
+${PYSITELIB}/volatility/plugins/mac/pgrp_hash_table.pyo
+${PYSITELIB}/volatility/plugins/mac/pid_hash_table.py
+${PYSITELIB}/volatility/plugins/mac/pid_hash_table.pyc
+${PYSITELIB}/volatility/plugins/mac/pid_hash_table.pyo
+${PYSITELIB}/volatility/plugins/mac/print_boot_cmdline.py
+${PYSITELIB}/volatility/plugins/mac/print_boot_cmdline.pyc
+${PYSITELIB}/volatility/plugins/mac/print_boot_cmdline.pyo
+${PYSITELIB}/volatility/plugins/mac/proc_maps.py
+${PYSITELIB}/volatility/plugins/mac/proc_maps.pyc
+${PYSITELIB}/volatility/plugins/mac/proc_maps.pyo
+${PYSITELIB}/volatility/plugins/mac/procdump.py
+${PYSITELIB}/volatility/plugins/mac/procdump.pyc
+${PYSITELIB}/volatility/plugins/mac/procdump.pyo
+${PYSITELIB}/volatility/plugins/mac/psaux.py
+${PYSITELIB}/volatility/plugins/mac/psaux.pyc
+${PYSITELIB}/volatility/plugins/mac/psaux.pyo
+${PYSITELIB}/volatility/plugins/mac/pslist.py
+${PYSITELIB}/volatility/plugins/mac/pslist.pyc
+${PYSITELIB}/volatility/plugins/mac/pslist.pyo
+${PYSITELIB}/volatility/plugins/mac/pstasks.py
+${PYSITELIB}/volatility/plugins/mac/pstasks.pyc
+${PYSITELIB}/volatility/plugins/mac/pstasks.pyo
+${PYSITELIB}/volatility/plugins/mac/pstree.py
+${PYSITELIB}/volatility/plugins/mac/pstree.pyc
+${PYSITELIB}/volatility/plugins/mac/pstree.pyo
+${PYSITELIB}/volatility/plugins/mac/psxview.py
+${PYSITELIB}/volatility/plugins/mac/psxview.pyc
+${PYSITELIB}/volatility/plugins/mac/psxview.pyo
+${PYSITELIB}/volatility/plugins/mac/recover_filesystem.py
+${PYSITELIB}/volatility/plugins/mac/recover_filesystem.pyc
+${PYSITELIB}/volatility/plugins/mac/recover_filesystem.pyo
+${PYSITELIB}/volatility/plugins/mac/route.py
+${PYSITELIB}/volatility/plugins/mac/route.pyc
+${PYSITELIB}/volatility/plugins/mac/route.pyo
+${PYSITELIB}/volatility/plugins/mac/session_hash_table.py
+${PYSITELIB}/volatility/plugins/mac/session_hash_table.pyc
+${PYSITELIB}/volatility/plugins/mac/session_hash_table.pyo
+${PYSITELIB}/volatility/plugins/mac/socket_filters.py
+${PYSITELIB}/volatility/plugins/mac/socket_filters.pyc
+${PYSITELIB}/volatility/plugins/mac/socket_filters.pyo
+${PYSITELIB}/volatility/plugins/mac/trustedbsd.py
+${PYSITELIB}/volatility/plugins/mac/trustedbsd.pyc
+${PYSITELIB}/volatility/plugins/mac/trustedbsd.pyo
+${PYSITELIB}/volatility/plugins/mac/version.py
+${PYSITELIB}/volatility/plugins/mac/version.pyc
+${PYSITELIB}/volatility/plugins/mac/version.pyo
+${PYSITELIB}/volatility/plugins/machoinfo.py
+${PYSITELIB}/volatility/plugins/machoinfo.pyc
+${PYSITELIB}/volatility/plugins/machoinfo.pyo
+${PYSITELIB}/volatility/plugins/malware/__init__.py
+${PYSITELIB}/volatility/plugins/malware/__init__.pyc
+${PYSITELIB}/volatility/plugins/malware/__init__.pyo
+${PYSITELIB}/volatility/plugins/malware/apihooks.py
+${PYSITELIB}/volatility/plugins/malware/apihooks.pyc
+${PYSITELIB}/volatility/plugins/malware/apihooks.pyo
+${PYSITELIB}/volatility/plugins/malware/callbacks.py
+${PYSITELIB}/volatility/plugins/malware/callbacks.pyc
+${PYSITELIB}/volatility/plugins/malware/callbacks.pyo
+${PYSITELIB}/volatility/plugins/malware/cmdhistory.py
+${PYSITELIB}/volatility/plugins/malware/cmdhistory.pyc
+${PYSITELIB}/volatility/plugins/malware/cmdhistory.pyo
+${PYSITELIB}/volatility/plugins/malware/devicetree.py
+${PYSITELIB}/volatility/plugins/malware/devicetree.pyc
+${PYSITELIB}/volatility/plugins/malware/devicetree.pyo
+${PYSITELIB}/volatility/plugins/malware/idt.py
+${PYSITELIB}/volatility/plugins/malware/idt.pyc
+${PYSITELIB}/volatility/plugins/malware/idt.pyo
+${PYSITELIB}/volatility/plugins/malware/impscan.py
+${PYSITELIB}/volatility/plugins/malware/impscan.pyc
+${PYSITELIB}/volatility/plugins/malware/impscan.pyo
+${PYSITELIB}/volatility/plugins/malware/malfind.py
+${PYSITELIB}/volatility/plugins/malware/malfind.pyc
+${PYSITELIB}/volatility/plugins/malware/malfind.pyo
+${PYSITELIB}/volatility/plugins/malware/psxview.py
+${PYSITELIB}/volatility/plugins/malware/psxview.pyc
+${PYSITELIB}/volatility/plugins/malware/psxview.pyo
+${PYSITELIB}/volatility/plugins/malware/svcscan.py
+${PYSITELIB}/volatility/plugins/malware/svcscan.pyc
+${PYSITELIB}/volatility/plugins/malware/svcscan.pyo
+${PYSITELIB}/volatility/plugins/malware/threads.py
+${PYSITELIB}/volatility/plugins/malware/threads.pyc
+${PYSITELIB}/volatility/plugins/malware/threads.pyo
+${PYSITELIB}/volatility/plugins/malware/timers.py
+${PYSITELIB}/volatility/plugins/malware/timers.pyc
+${PYSITELIB}/volatility/plugins/malware/timers.pyo
+${PYSITELIB}/volatility/plugins/mbrparser.py
+${PYSITELIB}/volatility/plugins/mbrparser.pyc
+${PYSITELIB}/volatility/plugins/mbrparser.pyo
+${PYSITELIB}/volatility/plugins/mftparser.py
+${PYSITELIB}/volatility/plugins/mftparser.pyc
+${PYSITELIB}/volatility/plugins/mftparser.pyo
+${PYSITELIB}/volatility/plugins/moddump.py
+${PYSITELIB}/volatility/plugins/moddump.pyc
+${PYSITELIB}/volatility/plugins/moddump.pyo
+${PYSITELIB}/volatility/plugins/modscan.py
+${PYSITELIB}/volatility/plugins/modscan.pyc
+${PYSITELIB}/volatility/plugins/modscan.pyo
+${PYSITELIB}/volatility/plugins/modules.py
+${PYSITELIB}/volatility/plugins/modules.pyc
+${PYSITELIB}/volatility/plugins/modules.pyo
+${PYSITELIB}/volatility/plugins/multiscan.py
+${PYSITELIB}/volatility/plugins/multiscan.pyc
+${PYSITELIB}/volatility/plugins/multiscan.pyo
+${PYSITELIB}/volatility/plugins/netscan.py
+${PYSITELIB}/volatility/plugins/netscan.pyc
+${PYSITELIB}/volatility/plugins/netscan.pyo
+${PYSITELIB}/volatility/plugins/notepad.py
+${PYSITELIB}/volatility/plugins/notepad.pyc
+${PYSITELIB}/volatility/plugins/notepad.pyo
+${PYSITELIB}/volatility/plugins/objtypescan.py
+${PYSITELIB}/volatility/plugins/objtypescan.pyc
+${PYSITELIB}/volatility/plugins/objtypescan.pyo
+${PYSITELIB}/volatility/plugins/overlays/__init__.py
+${PYSITELIB}/volatility/plugins/overlays/__init__.pyc
+${PYSITELIB}/volatility/plugins/overlays/__init__.pyo
+${PYSITELIB}/volatility/plugins/overlays/basic.py
+${PYSITELIB}/volatility/plugins/overlays/basic.pyc
+${PYSITELIB}/volatility/plugins/overlays/basic.pyo
+${PYSITELIB}/volatility/plugins/overlays/linux/__init__.py
+${PYSITELIB}/volatility/plugins/overlays/linux/__init__.pyc
+${PYSITELIB}/volatility/plugins/overlays/linux/__init__.pyo
+${PYSITELIB}/volatility/plugins/overlays/linux/elf.py
+${PYSITELIB}/volatility/plugins/overlays/linux/elf.pyc
+${PYSITELIB}/volatility/plugins/overlays/linux/elf.pyo
+${PYSITELIB}/volatility/plugins/overlays/linux/linux.py
+${PYSITELIB}/volatility/plugins/overlays/linux/linux.pyc
+${PYSITELIB}/volatility/plugins/overlays/linux/linux.pyo
+${PYSITELIB}/volatility/plugins/overlays/mac/__init__.py
+${PYSITELIB}/volatility/plugins/overlays/mac/__init__.pyc
+${PYSITELIB}/volatility/plugins/overlays/mac/__init__.pyo
+${PYSITELIB}/volatility/plugins/overlays/mac/mac.py
+${PYSITELIB}/volatility/plugins/overlays/mac/mac.pyc
+${PYSITELIB}/volatility/plugins/overlays/mac/mac.pyo
+${PYSITELIB}/volatility/plugins/overlays/mac/macho.py
+${PYSITELIB}/volatility/plugins/overlays/mac/macho.pyc
+${PYSITELIB}/volatility/plugins/overlays/mac/macho.pyo
+${PYSITELIB}/volatility/plugins/overlays/native_types.py
+${PYSITELIB}/volatility/plugins/overlays/native_types.pyc
+${PYSITELIB}/volatility/plugins/overlays/native_types.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/__init__.py
+${PYSITELIB}/volatility/plugins/overlays/windows/__init__.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/__init__.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/crash_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/crash_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/crash_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/hibernate_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/hibernate_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/hibernate_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/kdbg_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/kdbg_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/kdbg_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/kpcr_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/kpcr_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/kpcr_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/pe_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/pe_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/pe_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/ssdt_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/ssdt_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/ssdt_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/tcpip_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/tcpip_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/tcpip_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/vad_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/vad_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/vad_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/vista.py
+${PYSITELIB}/volatility/plugins/overlays/windows/vista.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/vista.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/vista_sp0_x64_syscalls.py
+${PYSITELIB}/volatility/plugins/overlays/windows/vista_sp0_x64_syscalls.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/vista_sp0_x64_syscalls.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/vista_sp0_x64_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/vista_sp0_x64_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/vista_sp0_x64_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/vista_sp0_x86_syscalls.py
+${PYSITELIB}/volatility/plugins/overlays/windows/vista_sp0_x86_syscalls.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/vista_sp0_x86_syscalls.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/vista_sp0_x86_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/vista_sp0_x86_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/vista_sp0_x86_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/vista_sp12_x64_syscalls.py
+${PYSITELIB}/volatility/plugins/overlays/windows/vista_sp12_x64_syscalls.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/vista_sp12_x64_syscalls.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/vista_sp12_x86_syscalls.py
+${PYSITELIB}/volatility/plugins/overlays/windows/vista_sp12_x86_syscalls.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/vista_sp12_x86_syscalls.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/vista_sp1_x64_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/vista_sp1_x64_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/vista_sp1_x64_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/vista_sp1_x86_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/vista_sp1_x86_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/vista_sp1_x86_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/vista_sp2_x64_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/vista_sp2_x64_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/vista_sp2_x64_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/vista_sp2_x86_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/vista_sp2_x86_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/vista_sp2_x86_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win2003.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win2003.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win2003.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win2003_sp0_x86_syscalls.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win2003_sp0_x86_syscalls.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win2003_sp0_x86_syscalls.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win2003_sp0_x86_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win2003_sp0_x86_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win2003_sp0_x86_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win2003_sp12_x64_syscalls.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win2003_sp12_x64_syscalls.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win2003_sp12_x64_syscalls.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win2003_sp12_x86_syscalls.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win2003_sp12_x86_syscalls.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win2003_sp12_x86_syscalls.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win2003_sp1_x64_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win2003_sp1_x64_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win2003_sp1_x64_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win2003_sp1_x86_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win2003_sp1_x86_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win2003_sp1_x86_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win2003_sp2_x64_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win2003_sp2_x64_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win2003_sp2_x64_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win2003_sp2_x86_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win2003_sp2_x86_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win2003_sp2_x86_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win7.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win7.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win7.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win7_sp01_x64_syscalls.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win7_sp01_x64_syscalls.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win7_sp01_x64_syscalls.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win7_sp01_x86_syscalls.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win7_sp01_x86_syscalls.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win7_sp01_x86_syscalls.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win7_sp0_x64_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win7_sp0_x64_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win7_sp0_x64_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win7_sp0_x86_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win7_sp0_x86_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win7_sp0_x86_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win7_sp1_x64_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win7_sp1_x64_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win7_sp1_x64_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win7_sp1_x86_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win7_sp1_x86_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win7_sp1_x86_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win8.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win8.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win8.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win8_kdbg.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win8_kdbg.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win8_kdbg.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win8_sp0_x64_syscalls.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win8_sp0_x64_syscalls.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win8_sp0_x64_syscalls.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win8_sp0_x64_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win8_sp0_x64_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win8_sp0_x64_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win8_sp0_x86_syscalls.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win8_sp0_x86_syscalls.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win8_sp0_x86_syscalls.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win8_sp0_x86_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win8_sp0_x86_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win8_sp0_x86_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win8_sp1_x64_syscalls.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win8_sp1_x64_syscalls.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win8_sp1_x64_syscalls.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win8_sp1_x64_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win8_sp1_x64_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win8_sp1_x64_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win8_sp1_x86_syscalls.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win8_sp1_x86_syscalls.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win8_sp1_x86_syscalls.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win8_sp1_x86_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win8_sp1_x86_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win8_sp1_x86_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/windows.py
+${PYSITELIB}/volatility/plugins/overlays/windows/windows.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/windows.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/windows64.py
+${PYSITELIB}/volatility/plugins/overlays/windows/windows64.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/windows64.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/xp.py
+${PYSITELIB}/volatility/plugins/overlays/windows/xp.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/xp.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/xp_sp2_x86_syscalls.py
+${PYSITELIB}/volatility/plugins/overlays/windows/xp_sp2_x86_syscalls.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/xp_sp2_x86_syscalls.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/xp_sp2_x86_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/xp_sp2_x86_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/xp_sp2_x86_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/xp_sp3_x86_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/xp_sp3_x86_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/xp_sp3_x86_vtypes.pyo
+${PYSITELIB}/volatility/plugins/patcher.py
+${PYSITELIB}/volatility/plugins/patcher.pyc
+${PYSITELIB}/volatility/plugins/patcher.pyo
+${PYSITELIB}/volatility/plugins/patchguard.py
+${PYSITELIB}/volatility/plugins/patchguard.pyc
+${PYSITELIB}/volatility/plugins/patchguard.pyo
+${PYSITELIB}/volatility/plugins/pooltracker.py
+${PYSITELIB}/volatility/plugins/pooltracker.pyc
+${PYSITELIB}/volatility/plugins/pooltracker.pyo
+${PYSITELIB}/volatility/plugins/privileges.py
+${PYSITELIB}/volatility/plugins/privileges.pyc
+${PYSITELIB}/volatility/plugins/privileges.pyo
+${PYSITELIB}/volatility/plugins/procdump.py
+${PYSITELIB}/volatility/plugins/procdump.pyc
+${PYSITELIB}/volatility/plugins/procdump.pyo
+${PYSITELIB}/volatility/plugins/pstree.py
+${PYSITELIB}/volatility/plugins/pstree.pyc
+${PYSITELIB}/volatility/plugins/pstree.pyo
+${PYSITELIB}/volatility/plugins/raw2dmp.py
+${PYSITELIB}/volatility/plugins/raw2dmp.pyc
+${PYSITELIB}/volatility/plugins/raw2dmp.pyo
+${PYSITELIB}/volatility/plugins/registry/__init__.py
+${PYSITELIB}/volatility/plugins/registry/__init__.pyc
+${PYSITELIB}/volatility/plugins/registry/__init__.pyo
+${PYSITELIB}/volatility/plugins/registry/auditpol.py
+${PYSITELIB}/volatility/plugins/registry/auditpol.pyc
+${PYSITELIB}/volatility/plugins/registry/auditpol.pyo
+${PYSITELIB}/volatility/plugins/registry/hivelist.py
+${PYSITELIB}/volatility/plugins/registry/hivelist.pyc
+${PYSITELIB}/volatility/plugins/registry/hivelist.pyo
+${PYSITELIB}/volatility/plugins/registry/hivescan.py
+${PYSITELIB}/volatility/plugins/registry/hivescan.pyc
+${PYSITELIB}/volatility/plugins/registry/hivescan.pyo
+${PYSITELIB}/volatility/plugins/registry/lsadump.py
+${PYSITELIB}/volatility/plugins/registry/lsadump.pyc
+${PYSITELIB}/volatility/plugins/registry/lsadump.pyo
+${PYSITELIB}/volatility/plugins/registry/printkey.py
+${PYSITELIB}/volatility/plugins/registry/printkey.pyc
+${PYSITELIB}/volatility/plugins/registry/printkey.pyo
+${PYSITELIB}/volatility/plugins/registry/registryapi.py
+${PYSITELIB}/volatility/plugins/registry/registryapi.pyc
+${PYSITELIB}/volatility/plugins/registry/registryapi.pyo
+${PYSITELIB}/volatility/plugins/registry/shellbags.py
+${PYSITELIB}/volatility/plugins/registry/shellbags.pyc
+${PYSITELIB}/volatility/plugins/registry/shellbags.pyo
+${PYSITELIB}/volatility/plugins/registry/shimcache.py
+${PYSITELIB}/volatility/plugins/registry/shimcache.pyc
+${PYSITELIB}/volatility/plugins/registry/shimcache.pyo
+${PYSITELIB}/volatility/plugins/registry/userassist.py
+${PYSITELIB}/volatility/plugins/registry/userassist.pyc
+${PYSITELIB}/volatility/plugins/registry/userassist.pyo
+${PYSITELIB}/volatility/plugins/sockets.py
+${PYSITELIB}/volatility/plugins/sockets.pyc
+${PYSITELIB}/volatility/plugins/sockets.pyo
+${PYSITELIB}/volatility/plugins/sockscan.py
+${PYSITELIB}/volatility/plugins/sockscan.pyc
+${PYSITELIB}/volatility/plugins/sockscan.pyo
+${PYSITELIB}/volatility/plugins/ssdt.py
+${PYSITELIB}/volatility/plugins/ssdt.pyc
+${PYSITELIB}/volatility/plugins/ssdt.pyo
+${PYSITELIB}/volatility/plugins/strings.py
+${PYSITELIB}/volatility/plugins/strings.pyc
+${PYSITELIB}/volatility/plugins/strings.pyo
+${PYSITELIB}/volatility/plugins/taskmods.py
+${PYSITELIB}/volatility/plugins/taskmods.pyc
+${PYSITELIB}/volatility/plugins/taskmods.pyo
+${PYSITELIB}/volatility/plugins/tcaudit.py
+${PYSITELIB}/volatility/plugins/tcaudit.pyc
+${PYSITELIB}/volatility/plugins/tcaudit.pyo
+${PYSITELIB}/volatility/plugins/timeliner.py
+${PYSITELIB}/volatility/plugins/timeliner.pyc
+${PYSITELIB}/volatility/plugins/timeliner.pyo
+${PYSITELIB}/volatility/plugins/vadinfo.py
+${PYSITELIB}/volatility/plugins/vadinfo.pyc
+${PYSITELIB}/volatility/plugins/vadinfo.pyo
+${PYSITELIB}/volatility/plugins/vboxinfo.py
+${PYSITELIB}/volatility/plugins/vboxinfo.pyc
+${PYSITELIB}/volatility/plugins/vboxinfo.pyo
+${PYSITELIB}/volatility/plugins/verinfo.py
+${PYSITELIB}/volatility/plugins/verinfo.pyc
+${PYSITELIB}/volatility/plugins/verinfo.pyo
+${PYSITELIB}/volatility/plugins/vmwareinfo.py
+${PYSITELIB}/volatility/plugins/vmwareinfo.pyc
+${PYSITELIB}/volatility/plugins/vmwareinfo.pyo
+${PYSITELIB}/volatility/plugins/volshell.py
+${PYSITELIB}/volatility/plugins/volshell.pyc
+${PYSITELIB}/volatility/plugins/volshell.pyo
+${PYSITELIB}/volatility/poolscan.py
+${PYSITELIB}/volatility/poolscan.pyc
+${PYSITELIB}/volatility/poolscan.pyo
+${PYSITELIB}/volatility/protos.py
+${PYSITELIB}/volatility/protos.pyc
+${PYSITELIB}/volatility/protos.pyo
+${PYSITELIB}/volatility/registry.py
+${PYSITELIB}/volatility/registry.pyc
+${PYSITELIB}/volatility/registry.pyo
+${PYSITELIB}/volatility/scan.py
+${PYSITELIB}/volatility/scan.pyc
+${PYSITELIB}/volatility/scan.pyo
+${PYSITELIB}/volatility/timefmt.py
+${PYSITELIB}/volatility/timefmt.pyc
+${PYSITELIB}/volatility/timefmt.pyo
+${PYSITELIB}/volatility/utils.py
+${PYSITELIB}/volatility/utils.pyc
+${PYSITELIB}/volatility/utils.pyo
+${PYSITELIB}/volatility/win32/__init__.py
+${PYSITELIB}/volatility/win32/__init__.pyc
+${PYSITELIB}/volatility/win32/__init__.pyo
+${PYSITELIB}/volatility/win32/crashdump.py
+${PYSITELIB}/volatility/win32/crashdump.pyc
+${PYSITELIB}/volatility/win32/crashdump.pyo
+${PYSITELIB}/volatility/win32/domcachedump.py
+${PYSITELIB}/volatility/win32/domcachedump.pyc
+${PYSITELIB}/volatility/win32/domcachedump.pyo
+${PYSITELIB}/volatility/win32/hashdump.py
+${PYSITELIB}/volatility/win32/hashdump.pyc
+${PYSITELIB}/volatility/win32/hashdump.pyo
+${PYSITELIB}/volatility/win32/hive.py
+${PYSITELIB}/volatility/win32/hive.pyc
+${PYSITELIB}/volatility/win32/hive.pyo
+${PYSITELIB}/volatility/win32/lsasecrets.py
+${PYSITELIB}/volatility/win32/lsasecrets.pyc
+${PYSITELIB}/volatility/win32/lsasecrets.pyo
+${PYSITELIB}/volatility/win32/modules.py
+${PYSITELIB}/volatility/win32/modules.pyc
+${PYSITELIB}/volatility/win32/modules.pyo
+${PYSITELIB}/volatility/win32/network.py
+${PYSITELIB}/volatility/win32/network.pyc
+${PYSITELIB}/volatility/win32/network.pyo
+${PYSITELIB}/volatility/win32/rawreg.py
+${PYSITELIB}/volatility/win32/rawreg.pyc
+${PYSITELIB}/volatility/win32/rawreg.pyo
+${PYSITELIB}/volatility/win32/tasks.py
+${PYSITELIB}/volatility/win32/tasks.pyc
+${PYSITELIB}/volatility/win32/tasks.pyo
+${PYSITELIB}/volatility/win32/xpress.py
+${PYSITELIB}/volatility/win32/xpress.pyc
+${PYSITELIB}/volatility/win32/xpress.pyo
+tools/linux/Makefile
+tools/linux/module.c
+tools/linux/pmem/Makefile
+tools/linux/pmem/pmem.c
+tools/mac/convert.py
+tools/mac/mac_create_all_profiles.py
+tools/vtype_diff.py
diff --git a/security/volatility/distinfo b/security/volatility/distinfo
new file mode 100644
index 00000000000..fcb74d93a5a
--- /dev/null
+++ b/security/volatility/distinfo
@@ -0,0 +1,5 @@
+$NetBSD: distinfo,v 1.1 2015/06/03 22:21:41 pettai Exp $
+
+SHA1 (volatility-2.4.tar.gz) = 77ae1443062a5103c63377aee6170d6e09ca6354
+RMD160 (volatility-2.4.tar.gz) = 9db862c278cc09e2e9f197f30a79ee28d22fd905
+Size (volatility-2.4.tar.gz) = 2327513 bytes