OpenKCIndex

Description

Open the KC Index subview, which lists every region of the currently-loaded Apple kernelcache, grouped by the KEXT that owns it. From there you can load what you want and reach the KC actions (Locate).

Available under View > Open subviews when the current database is a kernelcache.

The KC Index widget

KEXTs are named by their bundle identifier, and the tree nests on the dots, so com.apple.iokit.IONetworkingFamily sits under com -> apple -> iokit. The letter beside each one says which collection it came from: B for boot, S for system, A for auxiliary. On a cache that spans more than one, the context menu also offers Show contents for, which hides and shows each collection.

Double-clicking a KEXT maps it on demand and jumps there.

See Kernelcache Workflow.