Update doc/source/getting-started-macos-tutorial.rst

Co-authored-by: Donghyun Kim <digitalisx99@gmail.com>
This commit is contained in:
cpuu
2022-11-20 10:18:47 +09:00
committed by GitHub
co-authored by Donghyun Kim
parent 53870c64d1
commit fc0fa30f9e
@@ -81,7 +81,7 @@ Thanks go to `stuxnet <https://github.com/stuxnet999/>`_ for providing this memo
The above command helps us to find the memory dump's Darwin kernel version. Now using the above banner we can search for the needed ISF file.
If ISF file cannot be found then, follow the instructions on :ref:`getting-started-macos-tutorial:Procedure to create symbol tables for macOS`. After that, place the ISF file under the ``volatility3/symbols/mac`` directory.
linux.pslist
mac.pslist
~~~~~~~~~~~~
.. code-block:: shell-session