Re: my comment earlier today about PostgrSQL databases and row
indentification, here's the section of the Rekall manual I
remembered:-
For some databases, this is always possible. For instance, in
PostgreSQL every row has associated with it a unique indeitifier
called the oid, which can be retrieved along with the row data; after
a new row is inserted, the oid of that row can be ascertained.
Similarly, Oracle has a rownum.
(... and that indeitifier typo isn't mine!)
--
Chris Green (chris(a)areti.co.uk)
"Never ascribe to malice, that which can be explained by incompetence."