[Vol-users] Re: Verify image signatures or similar functionality
30 Jul
2013
30 Jul
'13
3:46 p.m.
I meant process explorer and the "verified signer" feature
On Tue, Jul 30, 2013 at 8:43 PM, sockify <sockify(a)gmail.com> wrote:
Hi All
Apologies if this has been addressed already but can't find it in the
archives. Is volatility able to verify image signatures similar to how
process monitor can? Suspect the answer is no as it's not a live system and
may not be running under windows. None of the plugins seem to be able to do
this from what I can see, just want to check I'm not missing something.
Cheers
Ben
Attachments:
- attachment.html (text/html — 915 bytes)