Re: [Vol-users] 64bit memory images
2 Jan
2009
2 Jan
'09
10:08 a.m.
Hi Brian,
The current public release of Volatility does not support 64-bit
architectures. That being said..the code was designed to be easily adapted
to different hardware architectures and operating systems. We have
provided a number of custom 64-bit plugins to people in the past. 64-bit
architectures are also covered in our training courses. Please feel free
to send me an email about what you are looking for!
Happy New Year!
AW
On Thu, 1 Jan 2009, Brian McKinney wrote:
Hi all,
Forgive me if this is a stupid question, i'm a bit new to physical memory
analysis.
Is the structure of physical memory on a 64bit operating system different
than that of a 32bit operating system, and if so does volatility have the
capability to parse 64bit images?
v/r
--
-Brian