volatilityfoundation / profiles

Volatility profiles for Linux and Mac OS X

318 stars 100 forks source link

Closed tpalmer closed 5 years ago

tpalmer commented 5 years ago

Why

Volatility is unable to examine memory dumps from Ubuntu 18.04.1 systems using kernel version 4.15.0-42

Following the steps outlined in https://github.com/volatilityfoundation/volatility/wiki/Linux a profile was created containing the module.dwarf and System.map-4.15.0-42-generic files

tpalmer commented 5 years ago

@gleeda does this need anything else before it can be merged in?