Re: [Vol-users] dual core issue?
Jamie Levy
12 Dec
2007
12 Dec
'07
11:22 p.m.
Hi AAron,
Is it still the case that this same image
(image.vmem) can be analyzed on a non-dual machine but fails on the dual
machine?
Yes, this is still the case. I have had no trouble with the image on
single core machines running FC 7 and FC 8. I have also had no
trouble with running Volatility on the image using Cygwin.
Can you provide any information about the system the
image was taken from and how it was acquired?
The image is was taken from an OS running on vmware. If you want, I
can give you the image, but it was made from the following case:
http://www.cfreds.nist.gov/Hacking_Case.html
which was reanimated into a virtual machine using Live View:
http://liveview.sourceforge.net/
Hope this helps.
All the best,
-Jamie