Hi Dustin,
Yes, we've definitely successfully analyzed win2008. Do you have a 32
or 64 bit memory dump? Could you paste us the output of imageinfo and
kdbgscan please?
MHL
On Fri, Apr 6, 2012 at 12:03 PM, Dustin Mooney
<Dustin.Mooney(a)coalfire.com> wrote:
All,
Has anyone successfully analyzed memory from a windows 2008 server memory
dump? This is my third time attempting to do so, and have yet to have any
success with volatility. I took the memory dump so I know the profile,
however, volatility reports it as a Windows 7 machine. Any advice on how to
approach this persistent problem?
_______________________________________________
Vol-users mailing list
Vol-users(a)volatilityfoundation.org
http://lists.volatilityfoundation.org/mailman/listinfo/vol-users