[Vol-users] 64bit memory images

AAron Walters awalters at 4tphi.net
Fri Jan 2 09:08:08 CST 2009

Hi Brian,

The current public release of Volatility does not support 64-bit 
architectures. That being said..the code was designed to be easily adapted 
to different hardware architectures and operating systems. We have 
provided a number of custom 64-bit plugins to people in the past. 64-bit 
architectures are also covered in our training courses. Please feel free 
to send me an email about what you are looking for!

Happy New Year!


On Thu, 1 Jan 2009, Brian McKinney wrote:

> Hi all,
> Forgive me if this is a stupid question, i'm a bit new to physical memory
> analysis.
> Is the structure of physical memory on a 64bit operating system different
> than that of a 32bit operating system, and if so does volatility have the
> capability to parse 64bit images?
> v/r
> -- 
> -Brian

More information about the Vol-users mailing list