Lou Sierra

linpmem-v3.3-rc and GLIBC dependency issues

3

In a previously closed thread found here: https://github.com/Velocidex/c-aff4/issues/25 It was identified as a commented out line that solved the dependency issue. There is a "linpmem.gz" attachment dated April 26, 2018...

PhysicalMemory Extraction using linpmem

9

Our team completed a memory collection using winpmem version 2.1 on an Azure VM running Windows Server 2016 The output was in AFF4 format. I am attempting to extract the...

Windows Server VMEM - Unable to parse

6

**Describe the bug** A clear and concise description of what the bug is. vCenter suspended the VM. Downloaded the VMEM file (12gb) and attempted to use Volatility version 2 and...

Error in `dislocker': munmap_chunk()

2

System is RHEL 7.6 Workstation Security Profile Applied - USGCB/STIG FIPS Enabled Used a Ditto DX Forensic Fieldstation to create an physical collection out to E01 file of the source...

I have imported the public VM (20211006) into an AMI in AWS. I have done some simple testing attaching the resulting EC2 to my Workspace. SSH works, and the Kibanna...