[Vol-users] coldboot - usb, iso or distro - using LiME

Joe Sylve joe.sylve at gmail.com
Wed Jun 5 10:13:02 CDT 2013


I've seen it done with Android:
https://www1.informatik.uni-erlangen.de/frost

---
*Joe T. Sylve, M.S.*
Co-Founder
504ENSICS Labs
(504) 210-8270 (Office)

http://www.504ensics.com
PGP Key: http://www.504ensics.com/pgp_keys/joesylve.asc


On Wed, Jun 5, 2013 at 8:44 AM, Andrew Case <atcuno at gmail.com> wrote:

> booting to a real linux distro is still going to use quite a bit of
> RAM and most of it in the first GB of physical memory, which is not
> what you want. I believe there was DOS based live CD OS that was used
> during the cold boot reseasrch or by some group replicating it. This
> would be much more useful if you could find it.
>
> On Tue, Jun 4, 2013 at 9:04 AM, Filipe Bernardo <filipesam at gmail.com>
> wrote:
> > Hello all,
> > First congrats on a great tool :)
> >
> > I'm looking for some iso/distro to be able to do some "coldboot" testing,
> > and i was thinking on using LiME module.
> >
> > Does anyone have done anything related to this, like a really small
> kernel
> > booting to usb, and dump the mem?
> >
> > What do you guys use to do memory dumps? (on "real" systems not vm's ?)
> >
> > Thanks
> >
> >
> > _______________________________________________
> > Vol-users mailing list
> > Vol-users at volatilityfoundation.org
> > http://lists.volatilityfoundation.org/mailman/listinfo/vol-users
> >
> _______________________________________________
> Vol-users mailing list
> Vol-users at volatilityfoundation.org
> http://lists.volatilityfoundation.org/mailman/listinfo/vol-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.volatilityfoundation.org/pipermail/vol-users/attachments/20130605/d78d5e00/attachment.html


More information about the Vol-users mailing list