Hi Dave,

a few questions if you don't mind,

what's the VM version (vmware has numbered versions for their file formats, you can usually look it up in the VM's properties)?

could you share the output of psscan?

what other plugins you've tried running? could you share the output?

will it be possible to upload the VMware snapshot somewhere so i could look into it?

Thanks,

- Nir.

On Tue, Mar 19, 2013 at 2:31 AM, david nardoni <dnardoni@gmail.com> wrote:

I think I have some issues with a 8+gb VMware snapshot. I can get
psscan and thrdscan output but no other output from other plugins.

Any suggestions from the group on troubleshooting the image.

Fyi I can see all the data when I view it in hbgary responder pro.

Thanks

Dave

Sent from my iPhone
_______________________________________________
Vol-users mailing list
Vol-users@volatilesystems.com
http://lists.volatilityfoundation.org/mailman/listinfo/vol-users