volatilityfoundation / volatility3

Volatility 3.0 development
http://volatilityfoundation.org/
Other
2.72k stars 463 forks source link

Docs: Add warning around LiME raw format #1295

Closed eve-mem closed 1 month ago

eve-mem commented 1 month ago

Hello :wave:

I was looking at the docs and thought it might be useful to have a little warning against using the LiME raw format. The raw format doesn't include the padding needing for vol to be able to parse the memory as the different segments of raw memory get misaligned.

It's caused a few issues for us:

:fox_face:

ikelos commented 1 month ago

Looks good, thanks!