On 09/03/2015 17:21, Binh Q Pham wrote:
Hi folks,
Could you suggest me a way to extract information from Virtual
Machine's memory dump (I used 'pmemsave' to get this memory dump)?
Thanks for your help.
-Binh
I read somewhere offline that there is a project called
"volatility", which provides tools and scripts to examine
machine states found in such memory dumps.
Enjoy
Jakob
--
Jakob Bohm, CIO, Partner, WiseMo A/S. https://www.wisemo.com
Transformervej 29, 2860 Søborg, Denmark. Direct +45 31 13 16 10
This public discussion message is non-binding and may contain errors.
WiseMo - Remote Service Management for PCs, Phones and Embedded
