Re: [Vol-users] Determine Windows version from raw image?
30 Oct
2008
30 Oct
'08
11:07 p.m.
On Fri, Oct 31, 2008 at 1:14 AM, AAron Walters <awalters(a)4tphi.net> wrote:
Jun,
Sorry, I don't know of a link. I don't think it was ever publicly released.
That's good to hear. There maybe others in the community who would benefit
as well. Is there something in particular that would not make it possible?
I really mean that if I have time and I can do that.
Thanks,
J
I know
of someone else who would sample the different types of objects
found in memory and use that to determine the OS version.
Do you have the link?
constraints are, and what information you are willing to trust? If you
end up coming up with a new technique or finding a technique that works well
for you, I would encourage you to submit a plugin.
Certainly I would do that if possible.