Volatility shows ne...
 
Notifications
Clear all

Volatility shows network connection PID but pslit doesn't

2 Posts
2 Users
0 Reactions
1,857 Views
(@banderas20)
Eminent Member
Joined: 6 years ago
Posts: 29
Topic starter  

Hello,

I'm investigating a windows memory dump and with connscan I find a web connection with a certain PID.

However, when I issue pslist, pstree or psscan I can't seem to find that PID.

¿Any clue about this? ¿Where is that damn process?

Thanks!


   
Quote
(@aquachimere)
Eminent Member
Joined: 7 years ago
Posts: 32
 

Hi,

DId you tried psxview?, i thinks it was an old process


   
ReplyQuote
Share: