The Volatility Framework is a completely open collection of tools, implemented

in Python under the GNU General Public License, for the extraction of digital
artifacts from volatile memory (RAM) samples.

WWW: http://code.google.com/p/volatility

PR:		ports/172910
Submitted by:	antoine@FreeBSD.org
Feature safe:	yes

5 files changed, 695 insertions, 0 deletions

diff --git a/security/Makefile b/security/Makefile
index bde3320fbb31..cf93043742b3 100644
--- a/security/Makefile
+++ b/security/Makefile
@@ -761,6 +761,7 @@
     SUBDIR += py-trustedpickle
     SUBDIR += py-twistedConch
     SUBDIR += py-twofish
+    SUBDIR += py-volatility
     SUBDIR += py-xmlsec
     SUBDIR += py-yara
     SUBDIR += py-zope.app.authentication
diff --git a/security/py-volatility/Makefile b/security/py-volatility/Makefile
new file mode 100644
index 000000000000..9b165e75ff2b
--- /dev/null
+++ b/security/py-volatility/Makefile
@@ -0,0 +1,35 @@
+# Created by: antoine@FreeBSD.org
+# $FreeBSD$
+
+PORTNAME=	volatility
+PORTVERSION=	2.2
+CATEGORIES=	security python
+MASTER_SITES=	GOOGLE_CODE
+PKGNAMEPREFIX=	${PYTHON_PKGNAMEPREFIX}
+
+MAINTAINER=	antoine@FreeBSD.org
+COMMENT=	An advanced memory forensics framework
+
+LICENSE=	GPLv2
+
+RUN_DEPENDS=	${PYTHON_SITELIBDIR}/Crypto/__init__.py:${PORTSDIR}/security/py-pycrypto \
+		${PYTHON_SITELIBDIR}/distorm3/__init__.py:${PORTSDIR}/devel/py-distorm \
+		${PYTHON_SITELIBDIR}/yara.so:${PORTSDIR}/security/py-yara
+
+OPTIONS_DEFINE=	DOCS
+
+USE_PYTHON=	-2.7
+USE_PYDISTUTILS=easy_install
+
+PORTDOCS=	AUTHORS.txt CHANGELOG.txt CREDITS.txt LEGAL.txt LICENSE.txt README.txt
+DOCSDIR=	${PREFIX}/share/doc/py-${PORTNAME}
+
+.include <bsd.port.options.mk>
+
+post-install:
+.if ${PORT_OPTIONS:MDOCS}
+	@${MKDIR} ${DOCSDIR}
+	${INSTALL_DATA} ${PORTDOCS:S,^,${WRKSRC}/,} ${DOCSDIR}
+.endif
+
+.include <bsd.port.mk>
diff --git a/security/py-volatility/distinfo b/security/py-volatility/distinfo
new file mode 100644
index 000000000000..0a9069e54db1
--- /dev/null
+++ b/security/py-volatility/distinfo
@@ -0,0 +1,2 @@
+SHA256 (volatility-2.2.tar.gz) = 19bff19cbc909a63dfa6fcc1c6756f07b7c9575262ad6271571f5e9b266062ad
+SIZE (volatility-2.2.tar.gz) = 1703108
diff --git a/security/py-volatility/pkg-descr b/security/py-volatility/pkg-descr
new file mode 100644
index 000000000000..a1511834f058
--- /dev/null
+++ b/security/py-volatility/pkg-descr
@@ -0,0 +1,5 @@
+The Volatility Framework is a completely open collection of tools, implemented
+in Python under the GNU General Public License, for the extraction of digital
+artifacts from volatile memory (RAM) samples.
+
+WWW: http://code.google.com/p/volatility
diff --git a/security/py-volatility/pkg-plist b/security/py-volatility/pkg-plist
new file mode 100644
index 000000000000..015a95570b2c
--- /dev/null
+++ b/security/py-volatility/pkg-plist
@@ -0,0 +1,652 @@
+bin/vol.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/EGG-INFO/PKG-INFO
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/EGG-INFO/SOURCES.txt
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/EGG-INFO/dependency_links.txt
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/EGG-INFO/not-zip-safe
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/EGG-INFO/scripts/vol.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/EGG-INFO/top_level.txt
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/contrib/plugins/aspaces/__init__.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/contrib/plugins/aspaces/__init__.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/contrib/plugins/aspaces/__init__.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/contrib/plugins/aspaces/ewf.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/contrib/plugins/aspaces/ewf.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/contrib/plugins/aspaces/ewf.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/contrib/plugins/disablewarnings.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/contrib/plugins/disablewarnings.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/contrib/plugins/disablewarnings.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/contrib/plugins/enumfunc.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/contrib/plugins/enumfunc.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/contrib/plugins/enumfunc.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/contrib/plugins/example.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/contrib/plugins/example.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/contrib/plugins/example.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/contrib/plugins/pagecheck.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/contrib/plugins/pagecheck.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/contrib/plugins/pagecheck.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/contrib/plugins/psdispscan.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/contrib/plugins/psdispscan.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/contrib/plugins/psdispscan.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/contrib/plugins/scanprof.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/contrib/plugins/scanprof.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/contrib/plugins/scanprof.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/contrib/plugins/verinfo.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/contrib/plugins/verinfo.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/contrib/plugins/verinfo.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/tools/linux/Makefile
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/tools/linux/module.c
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/tools/linux/pmem.c
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/tools/vtype_diff.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/tools/vtype_diff.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/tools/vtype_diff.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/__init__.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/__init__.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/__init__.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/addrspace.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/addrspace.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/addrspace.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/cache.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/cache.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/cache.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/commands.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/commands.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/commands.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/conf.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/conf.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/conf.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/constants.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/constants.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/constants.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/debug.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/debug.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/debug.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/dwarf.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/dwarf.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/dwarf.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/exceptions.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/exceptions.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/exceptions.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/fmtspec.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/fmtspec.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/fmtspec.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/obj.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/obj.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/obj.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/__init__.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/__init__.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/__init__.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/addrspaces/__init__.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/addrspaces/__init__.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/addrspaces/__init__.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/addrspaces/amd64.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/addrspaces/amd64.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/addrspaces/amd64.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/addrspaces/crash.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/addrspaces/crash.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/addrspaces/crash.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/addrspaces/hibernate.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/addrspaces/hibernate.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/addrspaces/hibernate.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/addrspaces/ieee1394.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/addrspaces/ieee1394.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/addrspaces/ieee1394.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/addrspaces/intel.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/addrspaces/intel.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/addrspaces/intel.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/addrspaces/legacyintel.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/addrspaces/legacyintel.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/addrspaces/legacyintel.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/addrspaces/lime.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/addrspaces/lime.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/addrspaces/lime.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/addrspaces/standard.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/addrspaces/standard.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/addrspaces/standard.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/bioskbd.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/bioskbd.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/bioskbd.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/common.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/common.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/common.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/connections.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/connections.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/connections.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/connscan.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/connscan.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/connscan.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/crashinfo.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/crashinfo.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/crashinfo.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/dlldump.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/dlldump.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/dlldump.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/envars.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/envars.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/envars.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/evtlogs.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/evtlogs.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/evtlogs.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/fileparam.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/fileparam.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/fileparam.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/filescan.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/filescan.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/filescan.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/getservicesids.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/getservicesids.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/getservicesids.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/getsids.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/getsids.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/getsids.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/__init__.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/__init__.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/__init__.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/atoms.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/atoms.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/atoms.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/clipboard.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/clipboard.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/clipboard.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/constants.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/constants.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/constants.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/desktops.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/desktops.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/desktops.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/eventhooks.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/eventhooks.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/eventhooks.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/gahti.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/gahti.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/gahti.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/gditimers.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/gditimers.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/gditimers.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/messagehooks.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/messagehooks.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/messagehooks.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/screenshot.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/screenshot.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/screenshot.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/sessions.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/sessions.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/sessions.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/userhandles.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/userhandles.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/userhandles.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/vtypes/__init__.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/vtypes/__init__.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/vtypes/__init__.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/vtypes/vista.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/vtypes/vista.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/vtypes/vista.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/vtypes/win2003.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/vtypes/win2003.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/vtypes/win2003.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/vtypes/win7.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/vtypes/win7.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/vtypes/win7.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/vtypes/win7_sp0_x64_vtypes_gui.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/vtypes/win7_sp0_x64_vtypes_gui.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/vtypes/win7_sp0_x64_vtypes_gui.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/vtypes/win7_sp0_x86_vtypes_gui.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/vtypes/win7_sp0_x86_vtypes_gui.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/vtypes/win7_sp0_x86_vtypes_gui.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/vtypes/win7_sp1_x64_vtypes_gui.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/vtypes/win7_sp1_x64_vtypes_gui.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/vtypes/win7_sp1_x64_vtypes_gui.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/vtypes/win7_sp1_x86_vtypes_gui.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/vtypes/win7_sp1_x86_vtypes_gui.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/vtypes/win7_sp1_x86_vtypes_gui.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/vtypes/xp.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/vtypes/xp.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/vtypes/xp.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/win32k_core.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/win32k_core.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/win32k_core.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/windows.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/windows.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/windows.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/windowstations.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/windowstations.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/windowstations.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/handles.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/handles.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/handles.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/hibinfo.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/hibinfo.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/hibinfo.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/imagecopy.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/imagecopy.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/imagecopy.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/imageinfo.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/imageinfo.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/imageinfo.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/kdbgscan.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/kdbgscan.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/kdbgscan.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/kpcrscan.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/kpcrscan.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/kpcrscan.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/__init__.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/__init__.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/__init__.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/arp.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/arp.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/arp.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/bash.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/bash.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/bash.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/check_afinfo.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/check_afinfo.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/check_afinfo.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/check_creds.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/check_creds.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/check_creds.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/check_fops.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/check_fops.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/check_fops.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/check_idt.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/check_idt.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/check_idt.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/check_modules.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/check_modules.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/check_modules.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/check_syscall.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/check_syscall.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/check_syscall.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/common.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/common.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/common.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/cpuinfo.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/cpuinfo.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/cpuinfo.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/dentry_cache.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/dentry_cache.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/dentry_cache.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/dmesg.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/dmesg.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/dmesg.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/dump_map.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/dump_map.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/dump_map.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/find_file.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/find_file.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/find_file.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/flags.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/flags.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/flags.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/ifconfig.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/ifconfig.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/ifconfig.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/iomem.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/iomem.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/iomem.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/lsmod.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/lsmod.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/lsmod.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/lsof.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/lsof.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/lsof.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/mount.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/mount.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/mount.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/mount_cache.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/mount_cache.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/mount_cache.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/netstat.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/netstat.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/netstat.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/pidhashtable.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/pidhashtable.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/pidhashtable.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/pkt_queues.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/pkt_queues.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/pkt_queues.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/proc_maps.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/proc_maps.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/proc_maps.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/psaux.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/psaux.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/psaux.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/pslist.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/pslist.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/pslist.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/pslist_cache.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/pslist_cache.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/pslist_cache.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/pstree.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/pstree.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/pstree.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/psxview.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/psxview.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/psxview.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/route_cache.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/route_cache.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/route_cache.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/sk_buff_cache.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/sk_buff_cache.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/sk_buff_cache.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/slab_info.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/slab_info.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/slab_info.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/tmpfs.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/tmpfs.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/tmpfs.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/vma_cache.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/vma_cache.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux/vma_cache.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/malware/__init__.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/malware/__init__.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/malware/__init__.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/malware/apihooks.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/malware/apihooks.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/malware/apihooks.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/malware/callbacks.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/malware/callbacks.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/malware/callbacks.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/malware/cmdhistory.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/malware/cmdhistory.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/malware/cmdhistory.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/malware/devicetree.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/malware/devicetree.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/malware/devicetree.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/malware/idt.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/malware/idt.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/malware/idt.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/malware/impscan.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/malware/impscan.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/malware/impscan.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/malware/malfind.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/malware/malfind.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/malware/malfind.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/malware/psxview.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/malware/psxview.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/malware/psxview.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/malware/svcscan.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/malware/svcscan.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/malware/svcscan.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/malware/threads.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/malware/threads.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/malware/threads.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/malware/timers.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/malware/timers.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/malware/timers.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/moddump.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/moddump.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/moddump.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/modscan.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/modscan.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/modscan.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/modules.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/modules.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/modules.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/netscan.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/netscan.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/netscan.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/__init__.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/__init__.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/__init__.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/basic.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/basic.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/basic.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/linux/__init__.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/linux/__init__.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/linux/__init__.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/linux/linux.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/linux/linux.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/linux/linux.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/linux/linux64.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/linux/linux64.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/linux/linux64.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/native_types.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/native_types.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/native_types.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/__init__.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/__init__.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/__init__.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/crash_vtypes.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/crash_vtypes.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/crash_vtypes.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/hibernate_vtypes.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/hibernate_vtypes.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/hibernate_vtypes.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/kdbg_vtypes.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/kdbg_vtypes.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/kdbg_vtypes.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/kpcr_vtypes.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/kpcr_vtypes.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/kpcr_vtypes.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/pe_vtypes.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/pe_vtypes.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/pe_vtypes.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/ssdt_vtypes.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/ssdt_vtypes.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/ssdt_vtypes.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/tcpip_vtypes.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/tcpip_vtypes.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/tcpip_vtypes.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/vista.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/vista.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/vista.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/vista_sp0_x64_syscalls.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/vista_sp0_x64_syscalls.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/vista_sp0_x64_syscalls.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/vista_sp0_x64_vtypes.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/vista_sp0_x64_vtypes.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/vista_sp0_x64_vtypes.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/vista_sp0_x86_syscalls.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/vista_sp0_x86_syscalls.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/vista_sp0_x86_syscalls.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/vista_sp0_x86_vtypes.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/vista_sp0_x86_vtypes.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/vista_sp0_x86_vtypes.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/vista_sp12_x64_syscalls.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/vista_sp12_x64_syscalls.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/vista_sp12_x64_syscalls.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/vista_sp12_x86_syscalls.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/vista_sp12_x86_syscalls.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/vista_sp12_x86_syscalls.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/vista_sp1_x64_vtypes.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/vista_sp1_x64_vtypes.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/vista_sp1_x64_vtypes.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/vista_sp1_x86_vtypes.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/vista_sp1_x86_vtypes.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/vista_sp1_x86_vtypes.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/vista_sp2_x64_vtypes.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/vista_sp2_x64_vtypes.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/vista_sp2_x64_vtypes.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/vista_sp2_x86_vtypes.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/vista_sp2_x86_vtypes.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/vista_sp2_x86_vtypes.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win2003.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win2003.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win2003.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win2003_sp0_x86_syscalls.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win2003_sp0_x86_syscalls.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win2003_sp0_x86_syscalls.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win2003_sp0_x86_vtypes.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win2003_sp0_x86_vtypes.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win2003_sp0_x86_vtypes.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win2003_sp12_x64_syscalls.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win2003_sp12_x64_syscalls.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win2003_sp12_x64_syscalls.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win2003_sp12_x86_syscalls.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win2003_sp12_x86_syscalls.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win2003_sp12_x86_syscalls.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win2003_sp1_x64_vtypes.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win2003_sp1_x64_vtypes.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win2003_sp1_x64_vtypes.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win2003_sp1_x86_vtypes.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win2003_sp1_x86_vtypes.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win2003_sp1_x86_vtypes.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win2003_sp2_x64_vtypes.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win2003_sp2_x64_vtypes.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win2003_sp2_x64_vtypes.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win2003_sp2_x86_vtypes.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win2003_sp2_x86_vtypes.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win2003_sp2_x86_vtypes.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win7.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win7.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win7.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win7_sp01_x64_syscalls.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win7_sp01_x64_syscalls.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win7_sp01_x64_syscalls.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win7_sp01_x86_syscalls.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win7_sp01_x86_syscalls.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win7_sp01_x86_syscalls.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win7_sp0_x64_vtypes.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win7_sp0_x64_vtypes.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win7_sp0_x64_vtypes.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win7_sp0_x86_vtypes.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win7_sp0_x86_vtypes.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win7_sp0_x86_vtypes.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win7_sp1_x64_vtypes.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win7_sp1_x64_vtypes.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win7_sp1_x64_vtypes.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win7_sp1_x86_vtypes.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win7_sp1_x86_vtypes.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/win7_sp1_x86_vtypes.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/windows.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/windows.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/windows.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/windows64.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/windows64.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/windows64.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/xp.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/xp.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/xp.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/xp_sp2_x86_syscalls.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/xp_sp2_x86_syscalls.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/xp_sp2_x86_syscalls.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/xp_sp2_x86_vtypes.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/xp_sp2_x86_vtypes.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/xp_sp2_x86_vtypes.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/xp_sp3_x86_vtypes.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/xp_sp3_x86_vtypes.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows/xp_sp3_x86_vtypes.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/patcher.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/patcher.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/patcher.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/procdump.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/procdump.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/procdump.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/pstree.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/pstree.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/pstree.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/raw2dmp.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/raw2dmp.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/raw2dmp.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/registry/__init__.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/registry/__init__.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/registry/__init__.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/registry/hivelist.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/registry/hivelist.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/registry/hivelist.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/registry/hivescan.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/registry/hivescan.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/registry/hivescan.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/registry/lsadump.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/registry/lsadump.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/registry/lsadump.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/registry/printkey.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/registry/printkey.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/registry/printkey.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/registry/registryapi.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/registry/registryapi.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/registry/registryapi.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/registry/shimcache.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/registry/shimcache.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/registry/shimcache.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/sockets.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/sockets.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/sockets.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/sockscan.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/sockscan.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/sockscan.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/ssdt.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/ssdt.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/ssdt.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/strings.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/strings.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/strings.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/taskmods.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/taskmods.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/taskmods.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/userassist.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/userassist.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/userassist.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/vadinfo.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/vadinfo.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/vadinfo.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/volshell.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/volshell.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/volshell.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/protos.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/protos.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/protos.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/registry.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/registry.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/registry.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/scan.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/scan.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/scan.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/timefmt.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/timefmt.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/timefmt.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/utils.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/utils.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/utils.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/win32/__init__.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/win32/__init__.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/win32/__init__.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/win32/crashdump.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/win32/crashdump.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/win32/crashdump.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/win32/domcachedump.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/win32/domcachedump.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/win32/domcachedump.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/win32/hashdump.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/win32/hashdump.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/win32/hashdump.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/win32/hive.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/win32/hive.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/win32/hive.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/win32/lsasecrets.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/win32/lsasecrets.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/win32/lsasecrets.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/win32/modules.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/win32/modules.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/win32/modules.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/win32/network.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/win32/network.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/win32/network.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/win32/rawreg.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/win32/rawreg.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/win32/rawreg.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/win32/tasks.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/win32/tasks.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/win32/tasks.pyo
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/win32/xpress.py
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/win32/xpress.pyc
+%%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/win32/xpress.pyo
+@dirrm %%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/win32
+@dirrm %%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/registry
+@dirrm %%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/windows
+@dirrm %%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays/linux
+@dirrm %%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/overlays
+@dirrm %%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/malware
+@dirrm %%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/linux
+@dirrm %%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui/vtypes
+@dirrm %%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/gui
+@dirrm %%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins/addrspaces
+@dirrm %%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility/plugins
+@dirrm %%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/volatility
+@dirrm %%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/tools/linux
+@dirrm %%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/tools
+@dirrm %%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/contrib/plugins/aspaces
+@dirrm %%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/contrib/plugins
+@dirrm %%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/contrib
+@dirrm %%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/EGG-INFO/scripts
+@dirrm %%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%/EGG-INFO
+@dirrm %%PYTHON_SITELIBDIR%%/%%PYEASYINSTALL_EGG%%
+%%PORTDOCS%%@dirrm %%DOCSDIR%%