-
```
What steps will reproduce the problem?
1. Running my own .exe file which will inject my own DLL into explorer.exe,
running on a VM machine.
2. Acquiring the memory dump of that VM and running ma…
-
```
Has anyone had any success using LibVMI (http://vmitools.sandia.gov/) with
Volatility yet? The example codes provided with LibVMI work fine including the
python example but with Volatility I jus…
-
```
ran on windows 7 64 host with python 2.7, win7vss.vmem is a 32bit windows 7
image
C:\Users\admin\Desktop\vol>C:\Python27\python.exe volatility.py pslist
--profile=Win7SP0x86 -f win7vss.vmem
V…
-
```
What steps will reproduce the problem?
1. I am using this python code in Eclipse
https://code.google.com/p/volatility/wiki/VolatilityUsage23#Using_Volatility_as_
a_Library
2. I am getting this er…
-
```
ran on windows 7 64 host with python 2.7, win7vss.vmem is a 32bit windows 7
image
C:\Users\admin\Desktop\vol>C:\Python27\python.exe volatility.py pslist
--profile=Win7SP0x86 -f win7vss.vmem
V…
-
```
What steps will reproduce the problem?
1. I am using this python code in Eclipse
https://code.google.com/p/volatility/wiki/VolatilityUsage23#Using_Volatility_as_
a_Library
2. I am getting this er…
-
```
Hey guys,
This is related to Issue #135 but different enough to submit a separate patch.
You may have noticed that the handles output has always (since 1.3) printed
many File objects that appe…
-
```
Reported by Sebastien Bourdon-Richard on Vol-dev:
I'm playing with a 5GB Windows 7 SP0 64bit memory dump and I have some
problems with processes mapped over 4GB.
Pslist only shows System proces…
-
```
Hey guys,
I encountered this issue this week. I've been updating the code from CVS about
once a week and the problem just starting happening so it may be due to a
recent change.
$ python vola…
-
```
Reported by Sebastien Bourdon-Richard on Vol-dev:
I'm playing with a 5GB Windows 7 SP0 64bit memory dump and I have some
problems with processes mapped over 4GB.
Pslist only shows System proces…