PaulDotCom mailing list archives

Re: Imaging memory on Win7 64bit


From: Josh Little <josh () zombietango com>
Date: Fri, 17 Sep 2010 20:26:16 -0400

 On 9/17/2010 7:22 PM, Carlos Perez wrote:
Isn't Volatility limited to XP memory dumps?

Sent from my iPhone


Unfortunately, yes, or at the very least 32bit memory space. Either way
it won't work. So it looks like I'll have to take different routes for
these Win7 64-bit machines until Mandiant updates Memoryze. From some
posts on their M-unition blog it seems like an update is close to being
done, so hopefully it won't be long.

ZT
_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com

Current thread: