Sir,
I am doing my M.E in Cyber forensics and Information Security, currently doing my project work on MAC RAM dump analysis. I am using volafox-master for listing data from my dump collected from my lap. Can you please help me how we can find the list of running process. Currently i've found a symbol that volatility uses("_allproc") also ive found it from symutils file.
But i don't know what to do with it.