5:41 p.m.
On 2013-04-12 15:24, Carl Pulley wrote:
Hi James,
you'll be able to do this using the dumpfiles plugin (it
reconstructs the memory view of the on disk file system using the
shared cache). I understand that this will be released with the
Volatility 2.3 release.
All the best,
Carl.
Ah...guess I am out of luck until then...thank you!
James
5:47 p.m.
New subject: Dump hives to diesk
Hi James,
not entirely, as 2.3 is due this month.
However, if you're in a hurry and willing to work with some depreciated code (that
should operate under Volatility 2.0), then have a play with my exportfile plugin
(https://github.com/carlpulley/volatility)
All the best,
Carl.
9:53 a.m.
New subject: Dump hives to diesk
On Apr 12, 2013, at 3:47 PM, Carl Pulley <c.pulley(a)acme-labs.org.uk> wrote:
Hi James,
not entirely, as 2.3 is due this month.
However, if you're in a hurry and willing to work with some depreciated code (that
should operate under Volatility 2.0), then have a play with my exportfile plugin
(https://github.com/carlpulley/volatility)
All the best,
Carl._______________________________________________
Vol-users mailing list
Vol-users(a)volatilityfoundation.org
http://lists.volatilityfoundation.org/mailman/listinfo/vol-users
Thanks Carl!
James
4373
days inactive
4375
days old
vol-users@lists.volatilityfoundation.org
2 comments
2 participants
participants (2)
-
Carl Pulley -
James Lay