typeryougishiki
typeryougishiki
When I use linux.iomem to analyze 66.local.lime, the content of the generated config file is as follows: `{ "kernel.layer_name.class": "volatility3.framework.layers.intel.Intel32e", "kernel.layer_name.kernel_banner": "Linux version 3.10.0-1160.el7.x86_64 ([email protected]) (gcc version 4.8.5 20150623 (Red...
@ikelos Are you still following this issue?
Can I use this support to get fs info from lvm volume?
About getting the name of the item, the method I use is: Convert the type of the item pointer to the pointer of the class corresponding to FormType according to...