-
```
linux_dmesg seems to be exiting with an error. Tested with Volatility 2.2 and
2.3_alpha on CentOS 6.3 x86 (kernel 2.6.32-279.14.1.el6.i686). Memory image
and profile available from http://deer…
-
```
It's a Windows 7 image where I forgot to put the profile:
$ python vol.py -f win7vss.vmem hivelist
Volatile Systems Volatility Framework 1.4_rc1
Virtual Physical Name
Traceback (most recen…
-
```
Since scudette got me started...we should port the heap and stack plugins to 2.0
https://github.com/carlpulley/volatility/tree/master/memory_plugins/honeynet
don't worry about the file objects p…
-
```
What steps will reproduce the problem?
1. svn update to latest trunk (latest malware.py, too)
2. run apihooks module
imageinfo:
Suggested Profile(s) : WinXPSP3x86, WinXPSP2x86 (Instanti…
-
```
Hey guys,
I noticed something strange with kdbgscan. Not sure what the issue is yet.
Potential KDBG structure addresses (P = Physical, V = Virtual):
_KDBG: V 0xf80002837070 (Win7SP1x64)
_KD…
-
```
Since scudette got me started...we should port the heap and stack plugins to 2.0
https://github.com/carlpulley/volatility/tree/master/memory_plugins/honeynet
don't worry about the file objects p…
-
```
What steps will reproduce the problem?
1. svn update to latest trunk (latest malware.py, too)
2. run apihooks module
imageinfo:
Suggested Profile(s) : WinXPSP3x86, WinXPSP2x86 (Instanti…
-
```
Reported by Sebastien Bourdon-Richard on Vol-dev:
I'm playing with a 5GB Windows 7 SP0 64bit memory dump and I have some
problems with processes mapped over 4GB.
Pslist only shows System proces…
-
```
I took a crack at fixing kpcrscan for x64. Here's a patch that solves some of
the potential issues, but it still doesn't work.
The patch is built on r1289 from trunk.
```
Original issue rep…
-
```
I took a crack at fixing kpcrscan for x64. Here's a patch that solves some of
the potential issues, but it still doesn't work.
The patch is built on r1289 from trunk.
```
Original issue rep…