Re: [Vol-users] files-command missed

Michael, The files command only showed info on files, but there are 20+ other types of objects. The handles command shows you all objects, including mutexes, events, desktops, registry keys, etc. If you only want to see files, without using grep, try "handles -p 816 -t File" Also see: http://code.google.com/p/volatility/wiki/CommandReference#handles MHL On Thu, Aug 11, 2011 at 5:12 AM, Michael Felber <MichaelFelber(a)gmx.net>wrote: