±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 1 Overall: 34489
New Yesterday: 5 Visitors: 130

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Webinars

Volatility Framework - Mac OS X Profile

Forensic software discussion (commercial and open source/freeware). Strictly no advertising.
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

Volatility Framework - Mac OS X Profile

Post Posted: Thu Aug 16, 2018 12:15 pm

Hello,

Does anyone know if downloading the symbols for older MAC OS X versions and building a profile from a updated MAC OS X device works? I recently had a slew of failures attempting this on my own. But I suspect my memory images are the issue...

github.com/volatilityf...-a-profile

I am interpreting what I am reading that following the steps in the link should be sufficient from any base OS version of MAC OS X.  

citizen
Member
 
 
  

Re: Volatility Framework - Mac OS X Profile

Post Posted: Thu Sep 13, 2018 6:15 am

I create the profiles using this tutorial: ponderthebits.com/2017...olatility/

I use my macOS workstation to create the different profiles, changing the DebugKit to the distribution and build i want to create that profile for (this is better choice to have the profiles ready before an incident appear and avoid the corruption of the target machine).

I hope i helped you, Regards,

Sergio.  

Beleka
Member
 
 

Page 1 of 1