An Aside: The Editor

Scripts are edited using the editor widget provided by the QT toolkit on which Rekall is built. This supports a basic set of functions:

These are extended using keymaps. The default keymap add search and find-and-replace functions. These appear at the bottom of the edit window in a similar fashion to, for example, the FireFox web browser. They can be hidden by pressing the Esc (escape) key.

The script editors also provide an IntelliSense(tm)-like help mechanism. This is described at the end of this section, since a full description of what this can do depends on some knowledge the scripting interface.

It is possible to extend the mappings using custom keymaps; this is beyond the scope of this part of the manual.