What do you get if you put the full path to the memory image in the RC
file
(file:///Users/jamesk/Desktop/jackcr-challenge/DC-USTXHOU/ticket_number/memdump.bin)
?
Thanks,
Andrew (@attrc)
On 05/06/2016 07:02 AM, P1kachu wrote:
On Fri, 6 May 2016 13:33:37 +0200
P1kachu <p1kachu(a)lse.epita.fr> wrote:
Hello,
I was wondering if there was any plugin right now equivalent to
'imageinfo' but for Linux or Mac ? I was planning on give it a try if
not, but didn't want to waste time if anybody had done it before.
Thank you,
Erratum:
Imageinfo does more stuff than I expected, I was talking about a quick
plugin that would at least try to guess the operating system laying in
the memory dump, even for mac and linux.