Eve
Eve
Hi @ajmeese7 - what is the full command line you use when you get that error?
Thanks @ikelos! I always appericate your feedback. These are just mock ups rather any any code behind this to just hash out what it could look like. At the moment...
Hello again, I've made some changes so it works in the way described above. What do you think? I'm less sure my python is up to standard now however... There...
Hello @ikelos - I think this is ready for review again. As a recap as it's been a few months this PR is all about trying to make it easier...
Hey @ikelos I was looking into why I wasn't using an `isinstance` check in `_get_type_name_with_pointer` and it's to handle when we're being given just a type and not an actual...
Makes sense re versions. I'll play around with those checks a bit more - i think I get it now. 😀
Hi @b1gcat You can make your own ISF using dwarf2json, it's explained here: https://volatility3.readthedocs.io/en/latest/symbol-tables.html However if its a common version of linux (Ubuntu etc) you might find that @Abyss-W4tcher has...
If it really is a kernel that's been complied manually rather than from Debian, and no debugging symbols are available then getting it work is a lot more involved unfortunately....
You need to tell vol to do something, e.g. adding `windows.pslist` to the end of your command line.
Hi, looking at the command line it looks like you're trying to read just the page file on its own. Is that right? I don't think that will work, i...