Type information is contained in the debugging symbols (PDB files) for ntoskrnl.exe. I have a couple blog posts about extracting this information: http://moyix.blogspot.com/2007/08/pdb-stream-decomposition.html http://moyix.blogspot.com/2007/10/types-stream.html Cheers, Brendan On Jan 13, 2009, at 10:43 AM, Jun Koi wrote:

Hi Jun, Feel free to give it a try and report back what you find. I'm sure people would be interested. We are always excited to help more people contribute. Thanks, AW

Hi Kevin, Thanks for the email. We are always excited to help people get involved. If you are an IRC user, the easiest way to start getting involved is to join the #volatility channel on freenode. On the channel, you will be able to learn about a number of interesting projects that people are working on. You will also find a lot of people who dev the code base so they will be able to answer your questions. We have found the easiest way for people to start contributing is through plugins. The advantage with plugins is that you will get introduced to the code base and they can be a reasonable size project. For example, a plugin moyix recently mentioned is the ability to extract a specified dll from memory. With regard to version and bug tracking, please stay tuned. There are some upcoming changes. As for Vista support, I'm waiting to here back to see where things stand. Hmmm... A developer orientation document..sounds like an interesting idea. Thanks, AW On Wed, 14 Jan 2009, kevin thompson wrote: