[Vol-users] Linux process DTB

Sebastian Biedermann biedermann at seceng.informatik.tu-darmstadt.de
Wed Sep 18 02:10:32 CDT 2013


Hi guys,

I found out that version 2.3 of volatility shows an additional DTB address
value for each process in the linux_pslist command.
Can anyone tell me what this address exactly is and how it can be useful?

Thank you!

-- 
Sebastian




More information about the Vol-users mailing list