First, sorry for my poor english :(
Following the instructions provided by Bradley Schatz [1] I dont get
load the new profile:
C:\Volatility-1.4_rc1>dir plugins\overlays\Windows\vista_*
...
26/09/2010 22:47 2.232 vista_sp0_x86.py
26/09/2010 22:48 2.357 vista_sp0_x86.pyc
26/09/2010 22:47 286.008 vista_sp0_x86_vtypes.py
26/09/2010 22:48 192.774 vista_sp0_x86_vtypes.pyc
01/10/2010 23:18 2.235 vista_sp2_x86.py
01/10/2010 23:19 2.360 vista_sp2_x86.pyc
01/10/2010 22:36 315.748 vista_sp2_x86_vtypes.py
01/10/2010 23:19 207.429 vista_sp2_x86_vtypes.pyc
...
C:\Volatility-1.4_rc1>volatility.py --info
Volatile Systems Volatility Framework 1.4_rc1
...
PROFILES
--------
VistaSP0x86 - A Profile for Windows Vista SP0 x86
Win7SP0x86 - A Profile for Windows 7 SP0 x86
WinXPSP2 - A Profile for Windows XP SP2
WinXPSP3 - A Profile for windows XP SP3
...
What am I doing wrong?
[1]
http://blog.schatzforensic.com.au/2010/05/adding-new-structure-definitions-…
---
La verdad nos hara libres
http://neosysforensics.blogspot.com
http://www.wadalbertia.org
-<|:-P[G]