Anaïs Huang

> I don't remember now, it was something to the effect of `./vol.py -f memory.dmp -o ./dumped_files windows.dumpfiles.DumpFiles --virtaddr 0x3e1745d0` though. I think I ended up getting my problem resolved...

> Doing `--virtaddr` gives me the error `volatility: error: unrecognized arguments: ‑‑virtaddr` # `virtaddr` and `physaddr` According to the source code of [`windows.dumpfiles`](https://volatility3.readthedocs.io/en/latest/_modules/volatility3/plugins/windows/dumpfiles.html#), for a physical address, it is needed...

you can use `brew install inspectrum`