±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 35984
New Yesterday: 0 Visitors: 187

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Volatility shows network connection PID but pslit doesn't

Forensic software discussion (commercial and open source/freeware). Strictly no advertising.
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

banderas20
Member
 

Volatility shows network connection PID but pslit doesn't

Post Posted: May 15, 19 10:11

Hello,

I'm investigating a windows memory dump and with connscan I find a web connection with a certain PID.

However, when I issue pslist, pstree or psscan I can't seem to find that PID.

¿Any clue about this? ¿Where is that damn process?

Thanks!  
 
  

Aquachimere
Member
 

Re: Volatility shows network connection PID but pslit doesn'

Post Posted: May 21, 19 11:46

Hi,

DId you tried psxview?, i thinks it was an old process  
 

Page 1 of 1