WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-06 01:37:39 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add another demonstration image with handily the same system process offset, to demonstrate selecting PAE or 32bit.

Browse Source
This commit is contained in:
Mike Auty
2016-02-22 01:54:53 +00:00
parent 644a028ee4
commit 61d45c2c36
1 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility/cli/__init__.py
+5 -1
View File
@@ -47,9 +47,13 @@ class CommandLine(object):
# UI fills in the config:
ctx = contexts.Context()
ctx.config["pslist.primary.memory_layer.filename"] = "/run/media/mike/disk/memory/xp-laptop-2005-07-04-1430.img"
# ctx.config["pslist.primary.page_map_offset"] = 0x39000
ctx.config["pslist.offset"] = 0x823c87c0
# ctx.config["pslist.primary.memory_layer.filename"] = "/run/media/mike/disk/memory/private/mhl-dreamon.dmp"
# ctx.config["pslist.offset"] = 0x823c87c0
# ctx.config["pslist.primary.page_map_offset"] = 0x39000
config_path = plugin.__name__.lower()
windows = True