Re: [Vol-users] Memory imaging
4 Jul
2008
4 Jul
'08
11:39 p.m.
eric,
That's a tough situation. Can you provide any more information about the
machine? For example, desktop or laptop? What other peripheral ports does
it have available? There may be a couple of hardware dependent mechanisms
for acquiring memory under these circumstances. I'm assuming there is no
network access because it was removed from the network as part of incident
response.
Thanks,
AW
On Thu, 3 Jul 2008, evb wrote:
How does one image RAM on a Windows system with no
known Windows
login/password, if autorun is turned off, and if there is no network access.
Thanks!
eric
_______________________________________________
Vol-users mailing list
Vol-users(a)volatilityfoundation.org
http://lists.volatilityfoundation.org/mailman/listinfo/vol-users