Re: [Vol-users] BSOD while collecting a memory image
George M. Garner J.r (online)
9 Mar
2012
9 Mar
'12
12:23 p.m.
On 3/9/2012 11:54 AM, Mike Lambert wrote:
My ultimate backup plan is to hibernate and convert the hiberfil.sys.
That works so I'm not stuck with nothing.
Except that a lot of malware nowadays will remove itself from memory
during the crashdump or hibernation process. You will still catch the
script kiddies, of course.