yexihu / volatility

Automatically exported from code.google.com/p/volatility
GNU General Public License v2.0
0 stars 0 forks source link

moddump port for 1.4 #40

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
Hey guys, 

Here's a port of moddump for 1.4. Potential issues are that it inherits from 
procdump.ProcExeDump instead of disk vs mem being optional, and I've only 
tested it on XP[1,2,3] memory samples.

Original issue reported on code.google.com by michael.hale@gmail.com on 15 Oct 2010 at 3:29

Attachments:

GoogleCodeExporter commented 9 years ago
Thanks very much, I've added this to the contrib directory for now, since 
plugins are pretty location independent now.

I'm happy to move it to the core plugins if you'd prefer, but since it uses the 
config object extensively I didn't want to put it in there immediately whilst 
we're trying to keep the no-globals branch in sync...

Original comment by mike.auty@gmail.com on 16 Oct 2010 at 2:12

GoogleCodeExporter commented 9 years ago

Original comment by mike.auty@gmail.com on 16 Oct 2010 at 2:12