I asked and got an answer. Volatility has had support for 32 bit Vista and Win7 for some time. Some of the contributors have 64 bit working, but that code has not made it into the project yet, but "will probably make it into an upcoming release."
If you need 64 bit support, you may want to lurk on the developer mailing list for a bit and ask if someone could share that code with you. Good luck. On Tue, Sep 21, 2010 at 3:57 PM, Dave Hull <[email protected]> wrote: > Actually, Volatility has had support for Vista memory dumps for a > while now. I'm checking into support for 64-bit images. > > I believe @gleeda on Twitter may know the answer. > > On Fri, Sep 17, 2010 at 7:03 PM, Bugbear <[email protected]> wrote: >> Volatility _ xp only unless something recently changed >> >> On 9/17/10, Carlos Perez <[email protected]> wrote: >>> Isn't Volatility limited to XP memory dumps? _______________________________________________ Pauldotcom mailing list [email protected] http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com
