The acquisition with osxpmem was a success on a MBP 17" (early 2011) with 10.9 and 18GB of RAM!

Thanks :)


On Tue, Dec 10, 2013 at 2:14 PM, Johannes Stuettgen <johannes.stuettgen@cs.fau.de> wrote:
You could try with osxpmem and if it doesn't work send me an error report and i'll try fixing it. I didn't have time to play with the mac stuff for a while but when i wrote it last year I tried to keep it as version independent as possible, so there shouldn't be any major problems I can't fix.

Best Johannes


Andrew Case <atcuno@gmail.com> wrote:

Several people have reported success with osxpmem

Sent from my droid --

On Dec 10, 2013 10:01 AM, "Sebastien Bourdon-Richard" <sebastienbr@gmail.com> wrote:
Hey all,

Is there any tools available to acquire OSX 10.9 memory?

Mac memory reader does not work on 10.9.

Thanks in advance,

Sebastien

_______________________________________________
Vol-users mailing list
Vol-users@volatilityfoundation.org
http://lists.volatilityfoundation.org/mailman/listinfo/vol-users



Vol-users mailing list
Vol-users@volatilityfoundation.org
http://lists.volatilityfoundation.org/mailman/listinfo/vol-users

_______________________________________________
Vol-users mailing list
Vol-users@volatilesystems.com
http://lists.volatilityfoundation.org/mailman/listinfo/vol-users