[Vol-users] Mac sleepimage

Jarle Thorsen jarlethorsen at gmail.com
Tue Oct 21 01:44:55 CDT 2014


Does Volatility support the analysis of Mac /var/vm/sleepimage?

I did not see it mentioned in "The Art of Memory Forensics", and I
seem to have trouble even doing a simple mac_pslist against it...

-- 
Jarle Thorsen


More information about the Vol-users mailing list