Armet, <div><br></div><div>What was your full command line used to produce the hang? If you&#39;d like to try an older version of volatility, that would be a good idea as well - the 2.1 and 2.0 releases are available here: <a href="http://code.google.com/p/volatility/downloads/list">http://code.google.com/p/volatility/downloads/list</a>. </div>
<div><br></div><div>Thanks,</div><div>MHL<br><br><div class="gmail_quote">On Tue, Aug 14, 2012 at 11:22 AM, Armet, Lee <span dir="ltr">&lt;<a href="mailto:Lee.Armet@td.com" target="_blank">Lee.Armet@td.com</a>&gt;</span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">I imaged a live Win7 32bit system 3gb just now with both ftkimager and winen and when I try to analyse the ram vol just hangs and hangs.<br>

<br>
The memory acquisition seemed to complete without error.<br>
<br>
Should I use an older version of vol?<br>
<br>
<br>
<br>
Regards,<br>
<br>
Lee Armet | Senior Investigator, Forensic Technology Services| Global Security &amp; Investigations | TD Bank Group‬‪<br>
T: <a href="tel:%28416%29%20982-6855" value="+14169826855">(416) 982-6855</a> | M: <a href="tel:%28647%29%20242-0002" value="+16472420002">(647) 242-0002</a>‬‪<br>
NOTICE: Confidential message which may be privileged. Unauthorized use/disclosure prohibited. If received in error, please go to <a href="http://www.td.com/legal" target="_blank">www.td.com/legal</a> for instructions.<br>

AVIS : Message confidentiel dont le contenu peut être privilégié. Utilisation/divulgation interdites sans permission. Si reçu par erreur, prière d&#39;aller au <a href="http://www.td.com/francais/avis_juridique" target="_blank">www.td.com/francais/avis_juridique</a> pour des instructions.<br>

<br>_______________________________________________<br>
Vol-users mailing list<br>
<a href="mailto:Vol-users@volatilityfoundation.org">Vol-users@volatilesystems.com</a><br>
<a href="http://lists.volatilityfoundation.org/mailman/listinfo/vol-users" target="_blank">http://lists.volatilityfoundation.org/mailman/listinfo/vol-users</a><br>
<br></blockquote></div><br></div>