volatilityfoundation / volatility

An advanced memory forensics framework
http://volatilityfoundation.org/
GNU General Public License v2.0
7.04k stars 1.26k forks source link

Memory Dump processing #859

Open W1z4rd-0n3 opened 11 months ago

W1z4rd-0n3 commented 11 months ago

I am performing malware analysis using volatility 2.6. I collected the memory dump of a virtual box vm using vboxmanage dumpcore, and got a 4-5 GB memory dump. Volatility is taking too long to process this memory dump. Is there any way to collect the complete memory dump of windows 7 or 10 and reduce its size for volatility to digest it ?