mirror of
https://github.com/volatilityfoundation/volatility3.git
synced 2026-08-25 07:32:23 +02:00
@@ -182,8 +182,8 @@ of data. Each chunk contains the following information, in order:
|
||||
|
||||
An example (and the most common layer encountered in memory forensics) would be an Intel layer, which models the intel
|
||||
page mapping system. Based on a series of tables stored within the layer itself, an intel layer can convert a virtual
|
||||
address to a physical address. It should be noted that intel layers are surjective in that a single virtual address can
|
||||
map to multiple physical addresses, but a single virtual address can only ever map to a single physical address.
|
||||
address to a physical address. It should be noted that intel layers allow multiple virtual addresses to map to the
|
||||
same physical address (but a single virtual address cannot ever map to more than one physical address).
|
||||
|
||||
As a simple example, in a virtual layer which looks like `abracadabra` but maps to a physical layer that looks
|
||||
like `abcdr`, requesting `mapping(5, 4)` would return:
|
||||
|
||||
Reference in New Issue
Block a user