Re: [Vol-users] hiberfil.sys
15 Sep
2008
15 Sep
'08
12:37 p.m.
Jean-Francois,
Apologize I didn't check that before posting this
mail.
No worries. I'm sure others will have the same question. Please, feel
free to post any question! We enjoy helping people get involved.
I will work a little bit more on this (to see how to
access to the
valuable data after this zeroed area) before joining the IRC
It actually shouldn't require too much work. The header basically
provides meta-data that makes processing a little faster. It also
provides magic which can be useful for determining what transformations
need to be performed. All the information you need for analyzing the
memory sample can be determined without the meta information in the
header. If you have trouble, send me an email.
Thanks,
AW