[Vol-users] Help with ModDump

Miguel Guirao mguirao at gmail.com
Mon Jul 27 09:07:47 CDT 2009


Hi!

Does any body knows of good acquisition utilities so I can use??

I'm starting in this field, so i don't know of any. Best regards.

On Sun, Jul 26, 2009 at 9:57 PM, AAron Walters <awalters at 4tphi.net> wrote:

>
>
> Hey Mark,
>
> Thanks for the email.  The Volatility team appreciates all feedback and we
> welcome any questions you may have.
>
> What operating system are you using as your analysis platform?  Have you
> tried specifying an output directory (-d)?
>
> Can you clarify what you mean "except those that require a dump"? What
> commands are giving you trouble?
>
> Thanks,
>
> AW
>
>
> On Sun, 26 Jul 2009, Mark Morgan wrote:
>
>  I am using WIN XP SP 2, python 2.6.2 and the 1.3 beta of volatility.  I
>> can
>> get all the scripts to work just fine except those that require a dump.  I
>> am trying to dump the mods out of memory using the following syntax:
>> python volatility moddump -f /c/memory.img > /f/dumps
>>
>>
>> I have also tried with the backslash and forward slash but I either get
>> the
>> error:
>>
>> "File exists" or "Access Denied"
>>
>>
>> Any help would be appreciated.
>>
>> Mark Morgan
>> DOE/CIRC
>> Las Vegas, NV
>>
>>  _______________________________________________
> Vol-users mailing list
> Vol-users at volatilityfoundation.org
> http://lists.volatilityfoundation.org/mailman/listinfo/vol-users
>



-- 


Miguel Guirao A
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.volatilityfoundation.org/pipermail/vol-users/attachments/20090727/05c86ece/attachment.html


More information about the Vol-users mailing list