search

Velocidex / WinPmem

The multi-platform memory acquisition tool.
Apache License 2.0
671 stars 102 forks source link

How should I install and use software to call DLLs? #46

Open bbhxwl opened 1 year ago

bbhxwl commented 1 year ago

The following project integrates Winpmem to read memory, but some computers do not work. I do not know the reason, and the author is not very clear. It seems that I was asked to ask Winpmem. I don't know what to do. Why can some computers read and others can't?

https://github.com/ufrisk/MemProcFS

scudette commented 1 year ago

Winpmem is really a kernel driver that the userspace needs to talk to. I dont know how that project works but you should at least check that the driver is properly loaded (it may not be allowed depending on configuration). You can do this by trying to acquire a memory image with winpmem.

bbhxwl commented 1 year ago

Winpmem is really a kernel driver that the userspace needs to talk to. I dont know how that project works but you should at least check that the driver is properly loaded (it may not be allowed depending on configuration). You can do this by trying to acquire a memory image with winpmem.

Is there any specific method?