[Vol-users] Linux keyword search?

Scott Ehrlich srehrlich at gmail.com
Tue Nov 27 13:18:35 CST 2012

A review of the Linux-capable version of volatility doesn't seem to
indicate any option of performing a keyword search of captured memory.

Is this correct?

Also, I don't recall seeing an option in pmem.ko for capturing
virtual/shared memory versus physical memory.   Am I missing



More information about the Vol-users mailing list