Is anyone working on extending Volatility to work with Vista? I have a hibernation file from a Vista (32-bit) machine and am searching for possible intrusion/hacking. Don't have ram capture. Howard Patterson Special Agent Technical Services Unit Tennessee Bureau of Investigation 615-744-4376 howard.patterson(a)tn.gov