Home page logo

pauldotcom logo PaulDotCom mailing list archives

Re: Imaging memory on Win7 64bit
From: Dave Hull <dphull () trustedsignal com>
Date: Tue, 21 Sep 2010 18:52:02 -0500

I asked and got an answer. Volatility has had support for 32 bit Vista
and Win7 for some time. Some of the contributors have 64 bit working,
but that code has not made it into the project yet, but "will probably
make it into an upcoming release."

If you need 64 bit support, you may want to lurk on the developer
mailing list for a bit and ask if someone could share that code with

Good luck.

On Tue, Sep 21, 2010 at 3:57 PM, Dave Hull <dphull () trustedsignal com> wrote:
Actually, Volatility has had support for Vista memory dumps for a
while now. I'm checking into support for 64-bit images.

I believe @gleeda on Twitter may know the answer.

On Fri, Sep 17, 2010 at 7:03 PM, Bugbear <gbugbear () gmail com> wrote:
Volatility _ xp only unless something recently changed

On 9/17/10, Carlos Perez <carlos_perez () darkoperator com> wrote:
Isn't Volatility limited to XP memory dumps?
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
Main Web Site: http://pauldotcom.com

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]