Volatility: Difference between revisions

Revision as of 09:12, 24 July 2024

 vol.exe -f chall1.raw imageinfo

 vol.exe -f chall1.raw --profile Win7SP1x86 pslist

 vol.exe -f chall1.raw cmdscan

Revision as of 09:06, 24 July 2024 (view source) Admin (talk \| contribs) (Created page with " vol.exe -f chall1.raw imageinfo vol.exe -f chall1.raw --profile Win7SP1x86 pslist")		Revision as of 09:12, 24 July 2024 (view source) Admin (talk \| contribs) No edit summary Newer edit →
Line 2:		Line 2:

	vol.exe -f chall1.raw --profile Win7SP1x86 pslist		vol.exe -f chall1.raw --profile Win7SP1x86 pslist

			vol.exe -f chall1.raw cmdscan