You are right. It is not implemented yet. As I want to analyze a malicious process, so I want to catch this information from out side of the guest as it is known as Introspection and it has some benefits compared to in guest analysis. I found a program that do the same https://www.volatilesystems.com/default/volatility but I wanted to use VirtualBox Debugger for extracting information.
Thanks again for you clues :) On Mon, Feb 13, 2012 at 5:37 PM, Ivo Smits <[email protected]> wrote: > The functions that provide access to the memory in the debugger are > currently "not implemented" in VirtualBox. The functions exist, but return > a not implemented error. > > If you want to locate an individual process, you need knowledge of the > operating system's process structures. That won't be trivial. I think it > will be easier to do this using an application running inside the guest, > this application may be able to query the operating system for memory > mappings. > > Ivo > > Op 11-2-2012 16:19, Mansour Ahmadi schreef: > > Dear Ivo, > > Thanks a lot for your response. It is very helpful. > I have another question. How we can access to address apace of a specific > program with Imachinedebugger and for example find its imported libraries > (DLLs) or APIs? > Does anybody has any example about IMahcineDebugger or readVirtualMemory ? > > Thanks a lot. > > > On Sat, Feb 11, 2012 at 5:53 PM, Ivo Smits <[email protected]> wrote: > >> IVirtualBox VirtualBox = new VirtualBoxClass() >> IMachine Machine = VirtualBox.FindMachine(...) >> IMacgineDebugger Dbg = Machine.Console.Debugger >> >> Hope this helps. >> >> Best regards, >> >> Ivo Smits >> >> Op 11-2-2012 13:57, Mansour Ahmadi schreef: >> >> Dear Friends, >> >> I want to use Methods of IMachineDebugger in C# but I don't know which >> class implement this interface that I can use it. >> I mean : >> IMachineDebugger Dbg=new ???; >> >> In advance, thanks a lot >> >> >> _______________________________________________ >> vbox-dev mailing >> [email protected]https://www.virtualbox.org/mailman/listinfo/vbox-dev >> >> >> _______________________________________________ >> vbox-dev mailing list >> [email protected] >> https://www.virtualbox.org/mailman/listinfo/vbox-dev >> >> >
_______________________________________________ vbox-dev mailing list [email protected] https://www.virtualbox.org/mailman/listinfo/vbox-dev
