Loading ...
Sorry, an error occurred while loading the content.

Linux keyword search?

Expand Messages
  • Scott Ehrlich
    A review of the Linux-capable version of volatility doesn t seem to indicate any option of performing a keyword search of captured memory. Is this correct?
    Message 1 of 1 , Nov 27, 2012
    • 0 Attachment
      A review of the Linux-capable version of volatility doesn't seem to
      indicate any option of performing a keyword search of captured memory.

      Is this correct?

      Also, I don't recall seeing an option in pmem.ko for capturing
      virtual/shared memory versus physical memory. Am I missing
      something?

      Thanks.

      Scott
    Your message has been successfully submitted and would be delivered to recipients shortly.