[Vol-dev] Re: Extracting page tables from linux
1 Nov
2012
1 Nov
'12
1:36 p.m.
Ideally, I would want to be able to extract all page tables/ page
directories (kernel and processes), as well as some specific
processes' page tables on demand. A dump to disk would be suffix.
(Resending the message since I forgot to include the mailing list before)
Nhan
On Thu, Nov 1, 2012 at 9:58 AM, Andrew Case <atcuno(a)gmail.com> wrote:
Hello,
We can help if you can be a little more specific... which page tables are
you referring to? The kernel's page tables? All processes page tables? One
processes page tables? Also, how do you want them? Just a dump to disk?
On Thu, Nov 1, 2012 at 3:38 AM, Nhan Ho <nhanho0105(a)gmail.com> wrote:
Hello,
I'm currently in need of extracting page tables from a Linux memory
image (with a known profile). Can anyone point me in the direction of
Volatility's code that would handle the page tables ?
Thanks,
Nhan
_______________________________________________
Vol-dev mailing list
Vol-dev(a)volatilityfoundation.org
http://lists.volatilityfoundation.org/mailman/listinfo/vol-dev