4:51 a.m.
Hi,
I am using winpmem 1.3.1 for imaging in volatility but whenever I tried to use any of
feature of winpmem it gives
error: "Cannot open SCM? Are you administrator"
Where as I don't have any administrative passwords... So how can I solve this
issue...???
10:42 p.m.
Have you tried DumpIt from MoonSols Windows Memory Toolkit 2.0 ?
On Saturday, November 9, 2013, Nouman Zia wrote:
Hi,
I am using winpmem 1.3.1 for imaging in volatility but whenever I tried to
use any of feature of winpmem it gives
error: "Cannot open SCM? Are you administrator"
Where as I don't have any administrative passwords... So how can I solve
this issue...???
--
Matthieu Suiche
4:30 a.m.
Hi Nourman,
Current version of winpmem is 1.4.1.
Without administrator privileges you will not be able to acquire
memory using any tool though (This is built into the security model of
windows).
Michael.
On 9 November 2013 10:51, Nouman Zia <noumanzia(a)ymail.com> wrote:
Hi,
I am using winpmem 1.3.1 for imaging in volatility but whenever I tried to
use any of feature of winpmem it gives
error: "Cannot open SCM? Are you administrator"
Where as I don't have any administrative passwords... So how can I solve
this issue...???
_______________________________________________
Vol-users mailing list
Vol-users(a)volatilityfoundation.org
http://lists.volatilityfoundation.org/mailman/listinfo/vol-users
4402
days inactive
4403
days old
vol-users@lists.volatilityfoundation.org
2 comments
3 participants
participants (3)
-
Matthieu Suiche -
Michael Cohen -
Nouman Zia