volatility plugin c...
 
Notifications
Clear all

volatility plugin crash

1 Posts
1 Users
0 Likes
710 Views
(@afsfr)
Posts: 37
Eminent Member
Topic starter
 

I use vol.py (volatility framework 2.4) in Ubntu 14 X86, the memory dump is Windows 7, file format is *.dmp, I use plugin apihooks. then I encount below error message

alignment of WindowsCrashDumpSpace64 is too small,plugins will be extremely slow

so i didn't get result.

do i need to use img format of windows 7 dump? if so, how to convert *.dmp to *.img?
how many plugins is supported for windows7? i try connscan, psxview, all says can't support . thanks

 
Posted : 13/10/2018 12:11 pm
Share: