From fba734b284e0bed5f5cb7b4ac91c3194ea8bab2b Mon Sep 17 00:00:00 2001 From: Tejas <47889755+tejas15802@users.noreply.github.com> Date: Sun, 16 Oct 2022 19:10:55 +0530 Subject: [PATCH] AVML added. Restructured Acquiring Memory. --- doc/source/Linux.rst | 7 ++++--- doc/source/Windows.rst | 6 +++--- 2 files changed, 7 insertions(+), 6 deletions(-) diff --git a/doc/source/Linux.rst b/doc/source/Linux.rst index 223c9fc07..9fb5a686e 100644 --- a/doc/source/Linux.rst +++ b/doc/source/Linux.rst @@ -6,9 +6,10 @@ This guide will give you a brief overview of how volatility3 works as well as a Acquiring memory ---------------- -Volatility3 does not provide the ability to acquire memory. In this tutorial we will see how we can use `LiME `_ for this purpose. -It supports 32 and 64 bit captures from native Intel hardware as well as virtual machine guests. -It also supports capture from Android devices. See below for example commands building and running LiME: +Volatility3 does not provide the ability to acquire memory. +You can use any of the following tools to Acquire memory or the ones you are convenient with: + - `AVML - Acquire Volatile Memory for Linux `_ + - `LIME - Linux Memory Extract `_ .. code-block:: shell-session diff --git a/doc/source/Windows.rst b/doc/source/Windows.rst index d732e0cdc..80bc6ddc2 100644 --- a/doc/source/Windows.rst +++ b/doc/source/Windows.rst @@ -7,9 +7,9 @@ Acquiring memory ---------------- Volatility does not provide the ability to acquire memory. - -.. tip:: - You could use `WinPmem `_ for collecting windows memory dump. - - You could also use `FTK Imager `_ +You can use any of the following tools to Acquire memory or the ones you are convenient with: + - `WinPmem `_ + - `FTK Imager `_ Listing Plugins ---------------