[Vol-users] Server 2008

Michael Hale Ligh michael.hale at gmail.com
Sun Apr 8 23:31:54 CDT 2012

Hi Dustin,

Yes, we've definitely successfully analyzed win2008. Do you have a 32
or 64 bit memory dump? Could you paste us the output of imageinfo and
kdbgscan please?


On Fri, Apr 6, 2012 at 12:03 PM, Dustin Mooney
<Dustin.Mooney at coalfire.com> wrote:
> All,
> Has anyone successfully analyzed memory from a windows 2008 server memory
> dump? This is my third time attempting to do so, and have yet to have any
> success with volatility. I took the memory dump so I know the profile,
> however, volatility reports it as a Windows 7 machine. Any advice on how to
> approach this persistent problem?
> _______________________________________________
> Vol-users mailing list
> Vol-users at volatilityfoundation.org
> http://lists.volatilityfoundation.org/mailman/listinfo/vol-users

More information about the Vol-users mailing list