Velocidex
How should I install and use software to call DLLs?
The following project integrates Winpmem to read memory, but some computers do not work. I do not know the reason, and the author is not very clear. It seems that I was asked to ask Winpmem. I don't know what to do. Why can some computers read and others can't?
https://github.com/ufrisk/MemProcFS
Winpmem is really a kernel driver that the userspace needs to talk to. I dont know how that project works but you should at least check that the driver is properly loaded (it may not be allowed depending on configuration). You can do this by trying to acquire a memory image with winpmem.
Winpmem is really a kernel driver that the userspace needs to talk to. I dont know how that project works but you should at least check that the driver is properly loaded (it may not be allowed depending on configuration). You can do this by trying to acquire a memory image with winpmem.
Is there any specific method?