7:33 a.m.
Hello,
I was wondering if there was any plugin right now equivalent to
'imageinfo' but for Linux or Mac ? I was planning on give it a try if
not, but didn't want to waste time if anybody had done it before.
Thank you,
--
Stanislas 'P1kachu' Lejay
EPITA - LSE
If you're sleeping, you're doing it wrong.
8:02 a.m.
On Fri, 6 May 2016 13:33:37 +0200
P1kachu <p1kachu(a)lse.epita.fr> wrote:
Hello,
I was wondering if there was any plugin right now equivalent to
'imageinfo' but for Linux or Mac ? I was planning on give it a try if
not, but didn't want to waste time if anybody had done it before.
Thank you,
Erratum:
Imageinfo does more stuff than I expected, I was talking about a quick
plugin that would at least try to guess the operating system laying in
the memory dump, even for mac and linux.
--
Stanislas 'P1kachu' Lejay
EPITA - LSE
If you're sleeping, you're doing it wrong.
12:40 p.m.
There's a plugin to guess the mac profile (I think its mac_get_profile)
but it only tells you the OS version...no additional meta data. Nothing
equivalent on the Linux side yet.
Cheers!
MHL
On 5/6/16 7:02 AM, P1kachu wrote:
On Fri, 6 May 2016 13:33:37 +0200
P1kachu <p1kachu(a)lse.epita.fr> wrote:
Hello,
I was wondering if there was any plugin right now equivalent to
'imageinfo' but for Linux or Mac ? I was planning on give it a try if
not, but didn't want to waste time if anybody had done it before.
Thank you,
Erratum:
Imageinfo does more stuff than I expected, I was talking about a quick
plugin that would at least try to guess the operating system laying in
the memory dump, even for mac and linux.
1:49 a.m.
What do you get if you put the full path to the memory image in the RC
file
(file:///Users/jamesk/Desktop/jackcr-challenge/DC-USTXHOU/ticket_number/memdump.bin)
?
Thanks,
Andrew (@attrc)
On 05/06/2016 07:02 AM, P1kachu wrote:
On Fri, 6 May 2016 13:33:37 +0200
P1kachu <p1kachu(a)lse.epita.fr> wrote:
Hello,
I was wondering if there was any plugin right now equivalent to
'imageinfo' but for Linux or Mac ? I was planning on give it a try if
not, but didn't want to waste time if anybody had done it before.
Thank you,
Erratum:
Imageinfo does more stuff than I expected, I was talking about a quick
plugin that would at least try to guess the operating system laying in
the memory dump, even for mac and linux.
3113
days inactive
3114
days old
vol-users@lists.volatilityfoundation.org
3 comments
3 participants
participants (3)
-
Andrew Case -
Michael Ligh -
P1kachu