From 1ccd31b506768ef5e9201d5722aeff59be309919 Mon Sep 17 00:00:00 2001 From: Tejas <47889755+tejas15802@users.noreply.github.com> Date: Tue, 5 Jul 2022 19:47:47 +0530 Subject: [PATCH] Added note regarding pipe in windows doc and moved winPEM to tip --- doc/source/Windows.rst | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/doc/source/Windows.rst b/doc/source/Windows.rst index e722be0a3..2f8d58a04 100644 --- a/doc/source/Windows.rst +++ b/doc/source/Windows.rst @@ -6,7 +6,9 @@ This guide gives you a brief introduction to how volatility3 works and some demo Acquiring memory ---------------- -Volatility does not provide the ability to acquire memory. In this tutorial we will see how we can use `WinPmem `_ for this purpose. +Volatility does not provide the ability to acquire memory. + +.. tip:: You could use `WinPmem `_ for collecting windows memory dump. Listing Plugins --------------- @@ -20,6 +22,8 @@ Listing Plugins windows.dlllist.DllList Lists the loaded modules in a particular windows +.. note:: Here the the command is piped to grep and head in-order to give you sample list of plugins. + Using plugins -------------