Re: [Vol-users] Virtual Machine / Linux memory
5 Jul
2013
5 Jul
'13
2:10 p.m.
Awesome, thank you!
—
Sent from Mailbox for iPhone
On Fri, Jul 5, 2013 at 1:23 PM, Jamie Levy <jamie.levy(a)gmail.com> wrote:
Hi Lou,
There are no stupid questions. Yes, Volatility will support linux
memory from a Virtual Machine. If you have VMWare, the *.vmem file is
just a copy of RAM. We also support VMWareSnapShot files:
http://code.google.com/p/volatility/wiki/VMwareSnapshotFile
and VirtualBox:
http://code.google.com/p/volatility/wiki/VirtualBoxCoreDump
All the best,
-gleeda
On Fri, Jul 5, 2013 at 12:29 PM, Lou LaRocca <louislarocca(a)gmail.com> wrote:
Maybe a stupid question here but does Volatility
currently support the
analysis of linux memory from a Virtual Machine?
I see that it supports VM's and Linux separately but not together?
Thanks in advance
Lou
_______________________________________________
Vol-users mailing list
Vol-users(a)volatilityfoundation.org
http://lists.volatilityfoundation.org/mailman/listinfo/vol-users
--
PGP Fingerprint: 2E87 17A1 EC10 1E3E 11D3 64C2 196B 2AB5 27A4 AC92 Attachments:
- attachment.html (text/html — 1.6 KB)