Aqib Mukhtar
Aqib Mukhtar
I will advise you to run kdbgscan to get a correct profile and use --kdbg option in plugins. As this type of issue is discussed in the book 'The Art...
Do all of your suggested profiles have multiple processes and modules in PsActiveProcessHead and PsLoadedModuleList respectively. Check for the build string if any of the build string is 24000.
@CohenEliel I think @atcuno is asking you to clone the latest volatility repository and use it using python 2.x.
Yes you can clone/download zip file in another computer/mobile/tablet etc and transfer it to your computer via USB or USB cable etc. Make sure that using latest version will require...
When I set up my environment using python 2.6, two dependencies (Distorm3 and PyCrypto) were missing so volatility didn't function properly, so I needed to install both of them. Therefore,...
First of all, you need to install python. To verify your installation, open cmd, and type `python --version`. If the correct version number appears then this means python is installed...
What files do you have in Python-2.6.7. Python 3.5 is not useful for us, because volatility needs any version of python 2
I am not sure what that setup.py file actually is. For your ease, I have uploaded python 2.7 at Google drive. You can download and install python from [there](https://drive.google.com/file/d/1N8cw2lFYU7mg1-JM25BXCnfXryr_EfXj/view?usp=sharing). To...
Great!! Now run kdbgscan again as mentioned [here](https://github.com/volatilityfoundation/volatility/issues/706#issuecomment-630427037)
For sake of simplicity, open CMD and change current directory to the volatility-master folder. Now run following command `python vol.py -f ram.img kdbgscan`