I ve made a memdump.mem with help of FTKLite. Size is near 4 GB.
When trying to open on Ubuntu Server this dump (using ~ volatility -f memdump.mem imageinfo), its loading near 3 hours and then information -
Suggested Profile(s) : No suggestion (Instantiated with no profile)
AS Layer1 : FileAddressSpace ( ...memdump.mem)
PAE type : No PAE
When trying to use any other plugins its required profile.
Hello!
I ve made a memdump.mem with help of FTKLite. Size is near 4 GB. When trying to open on Ubuntu Server this dump (using ~ volatility -f memdump.mem imageinfo), its loading near 3 hours and then information - Suggested Profile(s) : No suggestion (Instantiated with no profile) AS Layer1 : FileAddressSpace ( ...memdump.mem) PAE type : No PAE
When trying to use any other plugins its required profile.
What am i doing wrong?