Luke Craig
Luke Craig
It seems likely it last worked with the [fork](https://github.com/lacraig2/volatility3) of volatility3 that I made (lacraig2/volatility3). The latest commit on master there is `4587de356d9be2e35ed58b4fbde7feb14f695a7c`. I’m considering updating this functionality.
That existed as a PANDA plugin in v1: https://github.com/moyix/panda/tree/master/qemu/panda_plugins/pmemaccess It was built for: https://github.com/moyix/panda-malrec I think we'd support a port to new PANDA.
That'd be nice to have. You'd essentially need to read the memory regions and construct an ELF file front to be read.
PR #1242 fixes issue. Merged.
I also experienced this issue.