[Vol-users] Linux keyword search?

Scott Ehrlich srehrlich at gmail.com
Tue Nov 27 13:18:35 CST 2012


A review of the Linux-capable version of volatility doesn't seem to
indicate any option of performing a keyword search of captured memory.

Is this correct?

Also, I don't recall seeing an option in pmem.ko for capturing
virtual/shared memory versus physical memory.   Am I missing
something?

Thanks.

Scott


More information about the Vol-users mailing list