{"adoption": {"forks": 402, "observed_at": "2026-08-28T04:06:04.774175+00:00", "stars": 2007}, "canonical_url": "https://ross.abutalabs.com/products/rekall", "card": {"archived": true, "artifact_type": "cli-tool", "description": "Rekall Memory Forensic Framework", "domain": ["security", "developer-tools", "operating-systems"], "enriched": true, "function": ["security", "reverse-engineering"], "health_score": 10, "homepage": "http://www.rekall-forensic.com", "language": "Python", "license": "GPL-2.0", "license_family": "copyleft", "maturity": "abandoned", "member_repos": ["google/rekall"], "name": "google/rekall", "platform": ["python", "windows", "cli", "cross-platform"], "pushed_at": "2020-10-18T04:33:58+00:00", "repo": "google/rekall", "stars": 2007, "tags": ["memory-forensics", "incident-response", "digital-forensics", "memory-acquisition", "discontinued", "forensics", "linux", "macos"], "topics": [], "urls": [], "use_cases": ["analyze a Windows memory dump for malware", "extract running processes from a Linux memory image", "perform incident response memory forensics", "acquire a physical memory sample from a live system", "investigate macOS memory captures", "find injected code in a 64-bit memory dump"], "what_it_is": "Rekall is a Python-based memory forensic framework for extracting and analyzing digital artifacts from physical memory images of Windows, Linux, and macOS systems. It also provides memory acquisition tools and was forked from the Volatility project, but is now officially discontinued and archived.", "when_to_avoid": ["you need an actively maintained memory forensics tool - the project is discontinued and archived", "you are starting a new incident response workflow - consider Volatility or YARA-based approaches instead", "you need memory acquisition on Windows - use the separately maintained WinPmem project"], "when_to_choose": ["you need to analyze legacy memory images and already have a working environment", "you want to study memory forensics techniques or fork the codebase", "you need a GPL-2.0 open-source memory analysis tool with no licensing constraints"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/rekall", "repo": "google/rekall", "role": "main", "score": 10}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:06:04.774175+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T03:01:24.948197+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "cd783b86cc1bc00ea4d8fdd4a54c207a0aa5fdea1834f54af3f2b0ccdd121dfb", "fetched_at": "2026-08-28T04:06:04.774175+00:00", "kind": "readme", "missing": false, "url": "https://github.com/google/rekall"}, {"content_hash": "904a12bbb66fbbc6bccc3fefe0c49f4296507107d780af94acef659d44861840", "fetched_at": "2026-08-29T10:41:19.085383+00:00", "kind": "homepage", "missing": false, "url": "http://www.rekall-forensic.com"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:06:04.774175+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T03:01:24.948197+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "cd783b86cc1bc00ea4d8fdd4a54c207a0aa5fdea1834f54af3f2b0ccdd121dfb", "fetched_at": "2026-08-28T04:06:04.774175+00:00", "kind": "readme", "missing": false, "url": "https://github.com/google/rekall"}, {"content_hash": "904a12bbb66fbbc6bccc3fefe0c49f4296507107d780af94acef659d44861840", "fetched_at": "2026-08-29T10:41:19.085383+00:00", "kind": "homepage", "missing": false, "url": "http://www.rekall-forensic.com"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T03:01:24.948197+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "cd783b86cc1bc00ea4d8fdd4a54c207a0aa5fdea1834f54af3f2b0ccdd121dfb", "fetched_at": "2026-08-28T04:06:04.774175+00:00", "kind": "readme", "missing": false, "url": "https://github.com/google/rekall"}, {"content_hash": "904a12bbb66fbbc6bccc3fefe0c49f4296507107d780af94acef659d44861840", "fetched_at": "2026-08-29T10:41:19.085383+00:00", "kind": "homepage", "missing": false, "url": "http://www.rekall-forensic.com"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:06:04.774175+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:06:04.774175+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:06:04.774175+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T03:01:24.948197+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "cd783b86cc1bc00ea4d8fdd4a54c207a0aa5fdea1834f54af3f2b0ccdd121dfb", "fetched_at": "2026-08-28T04:06:04.774175+00:00", "kind": "readme", "missing": false, "url": "https://github.com/google/rekall"}, {"content_hash": "904a12bbb66fbbc6bccc3fefe0c49f4296507107d780af94acef659d44861840", "fetched_at": "2026-08-29T10:41:19.085383+00:00", "kind": "homepage", "missing": false, "url": "http://www.rekall-forensic.com"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:06:04.774175+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:06:04.774175+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T03:01:24.948197+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "cd783b86cc1bc00ea4d8fdd4a54c207a0aa5fdea1834f54af3f2b0ccdd121dfb", "fetched_at": "2026-08-28T04:06:04.774175+00:00", "kind": "readme", "missing": false, "url": "https://github.com/google/rekall"}, {"content_hash": "904a12bbb66fbbc6bccc3fefe0c49f4296507107d780af94acef659d44861840", "fetched_at": "2026-08-29T10:41:19.085383+00:00", "kind": "homepage", "missing": false, "url": "http://www.rekall-forensic.com"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:06:04.774175+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:06:04.774175+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:06:04.774175+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T03:01:24.948197+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "cd783b86cc1bc00ea4d8fdd4a54c207a0aa5fdea1834f54af3f2b0ccdd121dfb", "fetched_at": "2026-08-28T04:06:04.774175+00:00", "kind": "readme", "missing": false, "url": "https://github.com/google/rekall"}, {"content_hash": "904a12bbb66fbbc6bccc3fefe0c49f4296507107d780af94acef659d44861840", "fetched_at": "2026-08-29T10:41:19.085383+00:00", "kind": "homepage", "missing": false, "url": "http://www.rekall-forensic.com"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:06:04.774175+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:06:04.774175+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T03:01:24.948197+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "cd783b86cc1bc00ea4d8fdd4a54c207a0aa5fdea1834f54af3f2b0ccdd121dfb", "fetched_at": "2026-08-28T04:06:04.774175+00:00", "kind": "readme", "missing": false, "url": "https://github.com/google/rekall"}, {"content_hash": "904a12bbb66fbbc6bccc3fefe0c49f4296507107d780af94acef659d44861840", "fetched_at": "2026-08-29T10:41:19.085383+00:00", "kind": "homepage", "missing": false, "url": "http://www.rekall-forensic.com"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T03:01:24.948197+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "cd783b86cc1bc00ea4d8fdd4a54c207a0aa5fdea1834f54af3f2b0ccdd121dfb", "fetched_at": "2026-08-28T04:06:04.774175+00:00", "kind": "readme", "missing": false, "url": "https://github.com/google/rekall"}, {"content_hash": "904a12bbb66fbbc6bccc3fefe0c49f4296507107d780af94acef659d44861840", "fetched_at": "2026-08-29T10:41:19.085383+00:00", "kind": "homepage", "missing": false, "url": "http://www.rekall-forensic.com"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T03:01:24.948197+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "cd783b86cc1bc00ea4d8fdd4a54c207a0aa5fdea1834f54af3f2b0ccdd121dfb", "fetched_at": "2026-08-28T04:06:04.774175+00:00", "kind": "readme", "missing": false, "url": "https://github.com/google/rekall"}, {"content_hash": "904a12bbb66fbbc6bccc3fefe0c49f4296507107d780af94acef659d44861840", "fetched_at": "2026-08-29T10:41:19.085383+00:00", "kind": "homepage", "missing": false, "url": "http://www.rekall-forensic.com"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T03:01:24.948197+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "cd783b86cc1bc00ea4d8fdd4a54c207a0aa5fdea1834f54af3f2b0ccdd121dfb", "fetched_at": "2026-08-28T04:06:04.774175+00:00", "kind": "readme", "missing": false, "url": "https://github.com/google/rekall"}, {"content_hash": "904a12bbb66fbbc6bccc3fefe0c49f4296507107d780af94acef659d44861840", "fetched_at": "2026-08-29T10:41:19.085383+00:00", "kind": "homepage", "missing": false, "url": "http://www.rekall-forensic.com"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 0, "longevity": 100, "rhythm": 8}, "computed_at": "2026-09-02T17:46:02.011165+00:00", "flags": ["archived"], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 4492, "days_push": 2145, "days_rel": null, "gap_med": null, "n_releases_24m": 0}, "score": 10, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}