Stick with libvmi, it holds promise. Sure vmware and VirtualBox still have their place, but from what you are expressing libvmi is the root you need to go.


From: Boudewijn Ector <boudewijn@boudewijnector.nl>
To: vol-users@volatilityfoundation.org
Sent: Saturday, September 28, 2013 4:52 PM
Subject: Re: [Vol-users] Linux Virtualization KVM or VirtualBox?

Op 28-9-2013 15:59, Edwin Smulders schreef:
> I've had no problems using Virtualbox and Linux guests. It's as simple
> as using the vboxmanage debugvm command to acquire the memory.
>
I'm trying to get (haven't spent that much time yet) libvmi to work with
KVM.
Reasons:

- Live analysis: no need for a dump , you can map the memory directly to
your host os
- I prefer KVM over virtualbox personally.

Cheers,

Boudewijn
_______________________________________________
Vol-users mailing list
Vol-users@volatilityfoundation.org
http://lists.volatilityfoundation.org/mailman/listinfo/vol-users