mirror of
https://github.com/volatilityfoundation/volatility3.git
synced 2026-09-13 21:27:39 +02:00
Added note regarding pipe in windows doc and moved winPEM to tip
This commit is contained in:
@@ -6,7 +6,9 @@ This guide gives you a brief introduction to how volatility3 works and some demo
|
||||
Acquiring memory
|
||||
----------------
|
||||
|
||||
Volatility does not provide the ability to acquire memory. In this tutorial we will see how we can use `WinPmem <https://github.com/Velocidex/WinPmem/releases/latest>`_ for this purpose.
|
||||
Volatility does not provide the ability to acquire memory.
|
||||
|
||||
.. tip:: You could use `WinPmem <https://github.com/Velocidex/WinPmem/releases/latest>`_ for collecting windows memory dump.
|
||||
|
||||
Listing Plugins
|
||||
---------------
|
||||
@@ -20,6 +22,8 @@ Listing Plugins
|
||||
windows.dlllist.DllList
|
||||
Lists the loaded modules in a particular windows
|
||||
|
||||
.. note:: Here the the command is piped to grep and head in-order to give you sample list of plugins.
|
||||
|
||||
Using plugins
|
||||
-------------
|
||||
|
||||
|
||||
Reference in New Issue
Block a user