[Vol-users] Linux keyword search?

jeremy corey jeremy.r.corey at gmail.com
Tue Nov 27 14:20:58 CST 2012


Hi Scott,
I'm a Volatility user and normally just use strings and grep to perform a
keyword search outside of the tool.
Not sure about the pmem.ko related question.
Jeremy


On Tue, Nov 27, 2012 at 2:18 PM, Scott Ehrlich <srehrlich at gmail.com> wrote:

> A review of the Linux-capable version of volatility doesn't seem to
> indicate any option of performing a keyword search of captured memory.
>
> Is this correct?
>
> Also, I don't recall seeing an option in pmem.ko for capturing
> virtual/shared memory versus physical memory.   Am I missing
> something?
>
> Thanks.
>
> Scott
> _______________________________________________
> Vol-users mailing list
> Vol-users at volatilityfoundation.org
> http://lists.volatilityfoundation.org/mailman/listinfo/vol-users
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.volatilityfoundation.org/pipermail/vol-users/attachments/20121127/c9eb2592/attachment.html


More information about the Vol-users mailing list