Info regarding pipe added

2026-09-13 05:07:38 +02:00 · 2022-07-05 19:50:33 +05:30
parent 73eec3386d
commit bcc923b1b9
1 changed files with 3 additions and 0 deletions
@@ -88,6 +88,9 @@ In windows memory forensics using volatility3, most of the times we do not requi

 ``windows.pstree`` helps us to display the parent child relation of processes.

+.. note:: Here the the command is piped to head in-order to give you smaller output of process here top 20.
+
+
 .. code-block:: shell-session

    $ python3 vol.py -f MemDump.DMP windows.hashdump