On Fri, Jul 5, 2013 at 1:23 PM, Jamie Levy <jamie.levy@gmail.com> wrote:

Hi Lou,

There are no stupid questions. Yes, Volatility will support linux
memory from a Virtual Machine. If you have VMWare, the *.vmem file is
just a copy of RAM. We also support VMWareSnapShot files:

http://code.google.com/p/volatility/wiki/VMwareSnapshotFile

and VirtualBox:

http://code.google.com/p/volatility/wiki/VirtualBoxCoreDump

All the best,

-gleeda



On Fri, Jul 5, 2013 at 12:29 PM, Lou LaRocca <louislarocca@gmail.com> wrote:
> Maybe a stupid question here but does Volatility currently support the
> analysis of linux memory from a Virtual Machine?
>
> I see that it supports VM's and Linux separately but not together?
>
>
> Thanks in advance
>
> Lou
>
> _______________________________________________
> Vol-users mailing list
> Vol-users@volatilityfoundation.org
> http://lists.volatilityfoundation.org/mailman/listinfo/vol-users
>



--
PGP Fingerprint: 2E87 17A1 EC10 1E3E 11D3 64C2 196B 2AB5 27A4 AC92