Extract live data from a memory dump

banderas20 · 2019-07-02T22:18:03Z

Hi.I have a Windows memory dump and I am analyzing it with Volatility.I have seen many interesting processes. However, I would need to get some live data regarding these processes.Such as linked Paths, opened documents, passwords entered, and so on.¿How can achieve this?Many thanks!

Page 2 / 2 Prev

General (Technical, Procedural, Software, Hardware etc.)

Last Post by Mathieuc 6 years ago

12 Posts

5 Users

0 Reactions

3,991 Views

RSS

banderas20

(@banderas20)

Eminent Member

Joined: 6 years ago

Posts: 29

Topic starter 18/07/2019 4:53 pm

I'll give it a try and post the results.

Thanks! D

ReplyQuote

Mathieuc

(@mathieuc)

New Member

Joined: 6 years ago

Posts: 1

14/01/2020 10:03 pm

Hello,
This article might interest you https://aio-forensics.com/recover-windows-passwords-Forensics .

ReplyQuote

Page 2 / 2 Prev

8 Forums
15.7 K Topics
92.3 K Posts
308 Online
41.1 K Members

Forum Icons: Forum contains no unread posts Forum contains unread posts

Topic Icons: Not Replied Replied Active Hot Sticky Unapproved Solved Private Closed