Timeline for How to recover a file with volatility from a linux profile [closed]
Current License: CC BY-SA 4.0
17 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Apr 9, 2023 at 13:07 | comment | added | P00 | The question can be close without problem. | |
| Apr 9, 2023 at 13:06 | comment | added | P00 | I just asking for help, not for somebody telling me en different comments just to read the documentation. I know I have to read it, and I already did. I am not just some newby with no idea who you can just pretend to help.... | |
| S Apr 8, 2023 at 12:12 | history | closed | schroeder♦ | Not suitable for this site | |
| S Apr 8, 2023 at 12:12 | comment | added | schroeder♦ | I’m voting to close this question because the problem was unsolvable. | |
| Apr 8, 2023 at 12:11 | comment | added | schroeder♦ | Ok, with the details provided in the comments ("I found out that it is not possible to recover this file") then this question is unanswerable. Please don't berate people trying to help you when 1. we don't have the file and we're working with partial information, and 2. it turns out the problem was unsolvable from the start. | |
| Apr 6, 2023 at 21:01 | comment | added | Sir Muffington | You're probably missing some symbols which are used for (remotely any) use case. You should read the initial setup steps as denoted in the documentation... If you did that already maybe try Vol3.py? I know what you've been told, but if you need to solve a problem... | |
| Apr 6, 2023 at 17:28 | comment | added | P00 | Please, if you are not going to contribute anything of value, do not act as if you know what you are talking about. I found out that it is not possible to recover this file, so please enlighten me, what documentation? | |
| Apr 5, 2023 at 15:27 | comment | added | Sir Muffington | Please follow the documentation... | |
| Apr 5, 2023 at 13:27 | comment | added | P00 | I dind.t downlad anything, I am not creating a profile, I am just trying to analyze a given memory with a given profile and the volatility2. Is there any way to recover a deleted file? | |
| Apr 4, 2023 at 17:42 | comment | added | Sir Muffington | Did you download the kernel symbols as written in the documentation? | |
| Apr 4, 2023 at 16:51 | comment | added | P00 | It is a college project so I have to use volatility 2 and the teacher give me the image so I guess there isn't any version problem | |
| Apr 3, 2023 at 17:54 | comment | added | Sir Muffington | Please refer to the documentation like github.com/volatilityfoundation/volatility/wiki/Linux If you prefer to use vol.py 3 which is strongly recommended please check out github.com/volatilityfoundation/volatility3 | |
| Apr 3, 2023 at 17:51 | comment | added | Sir Muffington | Welcome to the community. Let's start from the start - did you download and use the same kernel used as in the image? Keep in mind that kernels only up to 5.5 are supported according to the documentation. | |
| Apr 3, 2023 at 14:36 | history | edited | P00 | CC BY-SA 4.0 |
edited body
|
| S Apr 3, 2023 at 14:36 | history | suggested | kenlukas | CC BY-SA 4.0 |
grammar and typo edits
|
| Apr 3, 2023 at 14:22 | review | Suggested edits | |||
| S Apr 3, 2023 at 14:36 | |||||
| Apr 1, 2023 at 19:22 | history | asked | P00 | CC BY-SA 4.0 |