mquire 1.2.5

Memory forensics and analysis tool for querying Linux kernel memory dumps using SQL
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56

#
# Copyright (c) 2025-present, Trail of Bits, Inc.
# All rights reserved.
#
# This source code is licensed in accordance with the terms specified in
# the LICENSE file found in the root directory of this source tree.
#

[package]
name = "mquire"
version = "1.2.5"
edition = "2024"
authors = ["Trail of Bits"]
license = "Apache-2.0"
description = "Memory forensics and analysis tool for querying Linux kernel memory dumps using SQL"
repository = "https://github.com/trailofbits/mquire"
documentation = "https://docs.rs/mquire"
readme = "README.md"
keywords = ["linux", "kernel", "memory", "forensics", "sql"]
categories = ["command-line-utilities", "development-tools::debugging"]
exclude = [
    ".github/",
    "integration-tests/",
    "justfile",
    "package/",
]

[dependencies]
# Core library dependencies
btfparse = { version = "1.3.9", features = ["caching"] }
log = "0.4.29"
memmap2 = "0.9"
rayon = "1.11.0"
serde = { version = "1.0.219", features = ["derive"] }
serde_json = "1.0.149"
chrono = { version = "0.4.44", features = ["clock"], default-features = false }
thiserror = "2.0"

# CLI-only dependencies
clap = { version = "4.5", features = ["derive"], optional = true }
rustyline = { version = "17.0.2", default-features = false, optional = true }
rusqlite = { version = "0.38.0", features = ["vtab", "bundled"], optional = true }

[features]
default = ["cli"]
cli = ["clap", "rustyline", "rusqlite"]

[lints.clippy]
unwrap_used = "deny"

[lints.rust]
unsafe_code = "deny"

[[bin]]
name = "mquire"
required-features = ["cli"]