[Vol-users] Lookup Process Name by Memory Address on Windows XP
Matthew Wong
13 Nov
2013
13 Nov
'13
8:22 a.m.
Hello All,
I'm new to Volatility.
Say I found the string "password=hello world" somewhere in the memory, is
there anyway for me to know which process that memory block is currently
allocated to?
--
matt
Attachments:
- attachment.html (text/html — 907 bytes)