![]() There may be more than one profile suggestion if profiles are closely related. ![]() The imageinfo output tells you the suggested profile that you should pass as the parameter to -profile = PROFILE when using other plugins. Image Date And Time: 11:29:02 UTC Tasu 0000 Profile Suggested (S): Win7SP0圆4, Win7SP1圆4, Win2008R2SP0圆4, Win2008R2SP1圆4ĪS Layer2: FileAddressSpace (/Users/Michael/Desktop/win7_trial_64bit.Raw) Volatility Foundation Volatility Framework 2.4ĭetermining Profile Based On KDBG Search. Python Vol.Py -F $ ~ / Desktop / Win7_trial_64bit.Raw Imageinfo
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |