2:38 p.m.
Dear list,
Is it possible to extend the built in profiles for the standalone mac version of
volatility with extra ones?
I’ve downloaded the linux and mac profiles from github and tried putting them in a
subdirectory as with the source code version on Linux i.e.
volatility_2.5.mac.standalone/volatility/plugins/overlays/mac
However they don’t show up in the profile list when I run volatility_2.5.mac.standalone
—info
Regards,
Rob
3:08 p.m.
New subject: Specifying additional profiles for the standalone mac version of volatility
Hey Rob,
Yes, you can do this. You need to create a directory and then place the
new profiles in it. Then set --plugins=<path to new dir> as the first
argument after the standlone exe name. If you place --plugins as
anything but the first arg then it won't be recognized. Please let me
know if you have any issues with this.
Thanks,
Andrew (@attrc)
On 06/02/2016 01:38 PM, Rob Hunter wrote:
Dear list,
Is it possible to extend the built in profiles for the standalone mac
version of volatility with extra ones?
I’ve downloaded the linux and mac profiles from github and tried putting
them in a subdirectory as with the source code version on Linux
i.e. volatility_2.5.mac.standalone/volatility/plugins/overlays/mac
However they don’t show up in the profile list when I
run volatility_2.5.mac.standalone —info
Regards,
Rob
_______________________________________________
Vol-users mailing list
Vol-users(a)volatilityfoundation.org
http://lists.volatilityfoundation.org/mailman/listinfo/vol-users
3:19 p.m.
Hi Andrew.
Aha! My mistake, I'd seen that flag but thought it was only for plugins and
not also for profiles.
Thanks for your promt reply.
Regards
Rob
Sent from my phone
On Thu, 2 Jun 2016 21:08 Andrew Case, <atcuno(a)gmail.com> wrote:
Hey Rob,
Yes, you can do this. You need to create a directory and then place the
new profiles in it. Then set --plugins=<path to new dir> as the first
argument after the standlone exe name. If you place --plugins as
anything but the first arg then it won't be recognized. Please let me
know if you have any issues with this.
Thanks,
Andrew (@attrc)
On 06/02/2016 01:38 PM, Rob Hunter wrote:
Dear list,
Is it possible to extend the built in profiles for the standalone mac
version of volatility with extra ones?
I’ve downloaded the linux and mac profiles from github and tried putting
them in a subdirectory as with the source code version on Linux
i.e. volatility_2.5.mac.standalone/volatility/plugins/overlays/mac
However they don’t show up in the profile list when I
run volatility_2.5.mac.standalone —info
Regards,
Rob
_______________________________________________
Vol-users mailing list
Vol-users(a)volatilityfoundation.org
http://lists.volatilityfoundation.org/mailman/listinfo/vol-users
3136
days inactive
3136
days old
vol-users@lists.volatilityfoundation.org
2 comments
2 participants
participants (2)
-
Andrew Case -
Rob Hunter