Hi Sebastien,
The userhandles plugin is contained within a suite of win32k utils
that haven't been released yet. I'm looking forward to getting them
distributed sometime after Volatility 2.1 release.
MHL
On Sat, Feb 18, 2012 at 6:35 PM, Sebastien Bourdon-Richard
<sebastienbr(a)gmail.com> wrote:
Hi All,
I was looking at the Stuxnet footprint blog post (who is excellent btw) and
I was interested by the userhandles plugin.
./vol.py userhandles -t TYPE_WINDOW
http://mnin.blogspot.com/2011/06/examining-stuxnets-footprint-in-memory.html
I can't find this plugin for volatility... Does it comes with another
plugin? Where can I download it?
Thanks in advance,
Sebastien
_______________________________________________
Vol-users mailing list
Vol-users(a)volatilityfoundation.org
http://lists.volatilityfoundation.org/mailman/listinfo/vol-users