Greetings,
I was adding OS X support to my copy of Volatility per the instructions on
https://code.google.com/p/volatility/wiki/MacMemoryForensics. It went well but I thought
I'd pull the most recent version while I was at it.
Mac support went away when I did so. setup.py is now missing:
"volatility.plugins.overlays.mac",
Even when I add that back, vol.py --info doesn't show the OS X profiles.
Is this intentional? Is there a different version that I should be using?
Thanks!
-David