Volatility: Difference between revisions
Jump to navigation
Jump to search
No edit summary |
No edit summary |
||
| Line 1: | Line 1: | ||
vol.exe -f chall1.raw imageinfo | vol.exe -f chall1.raw imageinfo | ||
vol.exe -f chall1.raw --profile Win7SP1x86 pslist | vol.exe -f chall1.raw --profile Win7SP1x86 pslist | ||
vol.exe -f chall1.raw --profile Win7SP1x86 cmdscan | vol.exe -f chall1.raw --profile Win7SP1x86 cmdscan | ||
vol.exe -f chall1.raw --profile Win7SP1x86 consoles | vol.exe -f chall1.raw --profile Win7SP1x86 consoles | ||
vol.exe -f chall1.raw --profile Win7SP1x86 hashdump | vol.exe -f chall1.raw --profile Win7SP1x86 hashdump | ||
Revision as of 09:16, 24 July 2024
vol.exe -f chall1.raw imageinfo vol.exe -f chall1.raw --profile Win7SP1x86 pslist vol.exe -f chall1.raw --profile Win7SP1x86 cmdscan vol.exe -f chall1.raw --profile Win7SP1x86 consoles vol.exe -f chall1.raw --profile Win7SP1x86 hashdump