Volatility shows ne...
 
Notifications
Clear all

Volatility shows network connection PID but pslit doesn't

2 Posts
2 Users
0 Likes
1,421 Views
(@banderas20)
Posts: 29
Eminent Member
Topic starter
 

Hello,

I'm investigating a windows memory dump and with connscan I find a web connection with a certain PID.

However, when I issue pslist, pstree or psscan I can't seem to find that PID.

¿Any clue about this? ¿Where is that damn process?

Thanks!

 
Posted : 15/05/2019 10:11 am
(@aquachimere)
Posts: 32
Eminent Member
 

Hi,

DId you tried psxview?, i thinks it was an old process

 
Posted : 21/05/2019 11:46 am
Share: