Luke Craig

Results 45 comments of Luke Craig

It seems likely it last worked with the [fork](https://github.com/lacraig2/volatility3) of volatility3 that I made (lacraig2/volatility3). The latest commit on master there is `4587de356d9be2e35ed58b4fbde7feb14f695a7c`. I’m considering updating this functionality.

That existed as a PANDA plugin in v1: https://github.com/moyix/panda/tree/master/qemu/panda_plugins/pmemaccess It was built for: https://github.com/moyix/panda-malrec I think we'd support a port to new PANDA.

That'd be nice to have. You'd essentially need to read the memory regions and construct an ELF file front to be read.

I also experienced this issue.