search

ksanchezcld / volatility

Automatically exported from code.google.com/p/volatility
GNU General Public License v2.0
1 stars 0 forks source link

vista beta 2 issue #132

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
I wasn't able to analyze the vista-beta2.img from:

http://www.cfreds.nist.gov/mem/memory-images.rar

Since we don't advertise support for vista beta 2, it may not be an issue. 
However, if its something small we can modify and make work, then it may not be 
a bad idea. Anyone want to give it a look?

$ python vol.py -f /mem/vista-beta2.img imageinfo
Volatile Systems Volatility Framework 1.4_rc1
Determining profile based on KDBG search...

          Suggested Profile(s) : No suggestion (Instantiated with VistaSP0x86)
                     AS Layer1 : JKIA32PagedMemory (Kernel AS)
                     AS Layer2 : FileAddressSpace (/mem/vista-beta2.img)
                      PAE type : No PAE
                           DTB : 0x11b000
                          KPCR : 0x820f9d00
             KUSER_SHARED_DATA : 0xffdf0000
           Image date and time : 2006-05-26 18:14:01 
     Image local date and time : 2006-05-26 18:14:01 
Could not list tasks, please verify the --profile option and whether this image 
is valid

Original issue reported on code.google.com by michael.hale@gmail.com on 15 Aug 2011 at 2:35

GoogleCodeExporter commented 9 years ago

Original comment by mike.auty@gmail.com on 15 Aug 2011 at 6:30

GoogleCodeExporter commented 9 years ago 
Per dev call agreement, work involved in solving this issue exceeds the benefit 
from doing so.

Original comment by michael.hale@gmail.com on 15 Dec 2011 at 7:52