Hello,
Which tool and version was used to acquire memory? Certain tools have
issues with the machines at and above the 8GB limit.
Thanks,
Andrew (@attrc)
On 3/1/2014 10:55 AM, Smelkovs, Konrads (London) wrote:
Hello,
C:\ >volatility-2.3.1.standalone.exe -f C:\image.raw kdbgscan --profile=Win7SP1x64
Volatility Foundation Volatility Framework 2.3.1
.....
Never finishes - analysing 8 gig dump, CPU max. Help?
This email has been sent by and on behalf of one or more of KPMG LLP, KPMG Audit plc,
KPMG Europe LLP ("ELLP"), KPMG Resource Centre Private Limited or a company
under the control of KPMG LLP, including KPMG United Kingdom plc and KPMG UK Limited
(together, "KPMG"). ELLP does not provide services to clients and none of its
subsidiaries has authority to bind it.
This email, and any attachments, is confidential and may be privileged or otherwise
protected from disclosure. It is intended solely for the stated addressee(s) and access to
it by any other person is unauthorised. If you are not the intended recipient, you must
not disclose, copy, circulate or in any other way use or rely on the information contained
herein. If you have received this email in error, please inform us immediately and delete
all copies of it.
Any communications made with KPMG may be monitored and a record may be kept of any
communication.
Any opinion or advice contained herein is subject to the terms and conditions set out in
your KPMG LLP client engagement letter.
A list of members of KPMG LLP and ELLP is open for inspection at KPMG's registered
office.
KPMG LLP (registered no. OC301540) and ELLP (registered no. OC324045) are limited
liability partnerships registered in England and Wales. Each of KPMG Audit plc (registered
no. 03110745), KPMG United Kingdom plc (registered no. 03513178) and KPMG UK Limited
(registered no. 03580549) are companies registered in England and Wales. Each entity's
registered office is at 15 Canada Square, London, E14 5GL.
_______________________________________________
Vol-users mailing list
Vol-users(a)volatilityfoundation.org
http://lists.volatilityfoundation.org/mailman/listinfo/vol-users