MHL, That would be great, I would love to create one and put it out for everyone to utilize. Thanks for the link to Flame! Ryan Gibson GCFA, GCIH, Security + Office: 858-651-1689 Mobile: 619-804-8736 Senior IT Security Engineer -----Original Message----- From: Michael Ligh [mailto:michael.ligh@mnin.org] Sent: Wednesday, February 12, 2014 2:23 PM To: Gibson, Ryan Cc: vol-users(a)volatilityfoundation.org Subject: Re: [Vol-users] Duqu Image Hey Ryan, I personally don't have a duqu memory image, but I might be able to dig up some malware samples if you wanted to create one. I do have a flame memory image and there's a write up about it here: http://mnin.blogspot.com/2012/06/quickpost-flame-volatility.html MHL -------------------------------------------------- Michael Ligh (@iMHLv2) GPG: http://mnin.org/gpg.pubkey.txt Blog: http://volatility-labs.blogspot.com On Feb 11, 2014, at 12:50 PM, "Gibson, Ryan" <gryan(a)qualcomm.com> wrote: