What do you get if you put the full path to the memory image in the RC file (file:///Users/jamesk/Desktop/jackcr-challenge/DC-USTXHOU/ticket_number/memdump.bin) ?
Thanks, Andrew (@attrc) On 05/06/2016 07:02 AM, P1kachu wrote: > On Fri, 6 May 2016 13:33:37 +0200 > P1kachu <[email protected]> wrote: > >> Hello, >> >> I was wondering if there was any plugin right now equivalent to >> 'imageinfo' but for Linux or Mac ? I was planning on give it a try if >> not, but didn't want to waste time if anybody had done it before. >> >> Thank you, >> > > Erratum: > Imageinfo does more stuff than I expected, I was talking about a quick > plugin that would at least try to guess the operating system laying in > the memory dump, even for mac and linux. > _______________________________________________ Vol-users mailing list [email protected] http://lists.volatilesystems.com/mailman/listinfo/vol-users
