Tagged Questions

-3
votes
0answers
29 views

How much can I recover memory data from memory dump created when BSOD occurred? [closed]

Let's say in Windows 7 every Windows setting is set to default. Computer suddenly goes onto BSOD, and creates memory dump automatically. In this case, how much would one be able to read into memory ...
0
votes
0answers
57 views

How to use the Volatality Framework for Linux [closed]

I'm trying to run Volatality Framework on Linux memory Image but all the modules are for Windows, So there are some other plug-ins available for Linux. Now it is asking for "--profile=XXXXX" How I ...
4
votes
3answers
941 views

How to make / dump contents of memory for forensics analysis?

I work as a Information Security analyst and was recently tasked to look into Incident response + computer forensics related topics. For starters, I am experimenting on my PC which is running Windows ...