[Vol-users] using hex values with strings command
phatbuckett at gmail.com
Sun Apr 15 01:35:44 CDT 2012
Does malfind plugin + yara rule(s) work for your use case?
On Apr 14, 2012, at 9:12 PM, Mike Lambert <dragonforen at hotmail.com> wrote:
> I have read the command reference for the strings plugin and do not see an option to specify the string to look for in anything other than ascii.
> Could strings be expanded to include hex values, perhaps in the form of \x55\x5e\xe2\xfd\x83\xc4 or something like that?
> Mike Lambert
> Vol-users mailing list
> Vol-users at volatilityfoundation.org
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Vol-users