[Vol-users] Help with ModDump
mguirao at gmail.com
Mon Jul 27 09:07:47 CDT 2009
Does any body knows of good acquisition utilities so I can use??
I'm starting in this field, so i don't know of any. Best regards.
On Sun, Jul 26, 2009 at 9:57 PM, AAron Walters <awalters at 4tphi.net> wrote:
> Hey Mark,
> Thanks for the email. The Volatility team appreciates all feedback and we
> welcome any questions you may have.
> What operating system are you using as your analysis platform? Have you
> tried specifying an output directory (-d)?
> Can you clarify what you mean "except those that require a dump"? What
> commands are giving you trouble?
> On Sun, 26 Jul 2009, Mark Morgan wrote:
> I am using WIN XP SP 2, python 2.6.2 and the 1.3 beta of volatility. I
>> get all the scripts to work just fine except those that require a dump. I
>> am trying to dump the mods out of memory using the following syntax:
>> python volatility moddump -f /c/memory.img > /f/dumps
>> I have also tried with the backslash and forward slash but I either get
>> "File exists" or "Access Denied"
>> Any help would be appreciated.
>> Mark Morgan
>> Las Vegas, NV
> Vol-users mailing list
> Vol-users at volatilityfoundation.org
Miguel Guirao A
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Vol-users