Notifications
Clear all
General (Technical, Procedural, Software, Hardware etc.)
3
Posts
2
Users
0
Reactions
2,017
Views
Topic starter
28/01/2021 5:23 pm
Good morning everyone,
Does anyone know of a RAM analysis tool that will work with Windows RAM capture from a 1909 build?
I have tried Volatility 3.0, but to no avail.
31/01/2021 11:42 am
Good question. Even Volatility 2 does not have a profile for it.
https://github.com/volatilityfoundation/volatility/wiki/2.6-Win-Profiles
You could try Volexity, the commercial platform atÂ
https://www.volexity.com/company/contact/request-a-demo/
Andrew Case and his team are very responsive and I bet they are already working on a possibility to analyze 1909 versions. You could also simply ask him on Twitter.
That would be my approach.
Â
regards, Robin
Â
Topic starter
03/02/2021 8:14 pm
@bunnysniper thank you for the suggestions, and I will look into both options. Have a good day!