-
Volitility3 does not support the resolution of "*. vmsn" files (this file is a snapshot memory file of the old version of VMware, and the old version of VMware does not support "*. vmem" file), but Vo…
-
Hi,
I have read several guides explaining how to create Linux profiles to be used by Volatility, but I cannot find any guide for creating new Windows profiles. I know that there is a Python script (`…
-
I have been trying to use windows.netscan and windows.netstat but doesn't exist in volatility 3
-
after dumping the whole memory with winpmem xx.raw
and then extract lsass.exe using volatility3 we couldn't get access to the lsass using mimikatz
error always showing opening memory in mimikatz. …
-
Missing parentheses
![error parentheses](https://github.com/volatilityfoundation/volatility/assets/119460203/6e9cc91f-b179-4b8c-868e-8f6f247b96b5)
-
### UnicodeEncodeError: 'cp949' codec can't encode character '\ufffd' in position 39: illegal multibyte sequence
![image](https://user-images.githubusercontent.com/21982942/76850898-aa973300-688b-1…
-
OSWatcher log file is in this [Gist](https://gist.github.com/Wenzel/20fa59a05187627987b2866bd4107c25)
Important part:
~~~
2020-04-04 19:07:17,038 DEBUG:volatility.framework.automagic.pdbscan:Usin…
-
----------------------------------------
### Bug description
i got 1143 package update today but i cant update using pacman or yay, have python3.11 conflicts
![image](https://user-images.gith…
-
**Describe the bug**
I am trying to perform memory analysis for below NTOSKRNL version windows 11 machine. I downloaded the symbols from Microsoft and converted. But when I try to perform analysis, t…
-
Hello to everyone,
I had recently ran into an issue when I had downloaded the Volatility3 framework. This is my first time using this tool and believed to have made an error. Any tips in that coul…