npetroni
npetroni
> @npetroni Have we seen examples of this happening before? It might mean that windows.zip archive is more useful than we expected? IIRC, we saw this once before for a...
What if we tried something more localized to caching, like this? https://github.com/volatilityfoundation/volatility3/tree/feature/disable-caching-try2
We can discuss it today. The exception trips for me, so I am missing something.
[win32k.pdb.json.txt](https://github.com/volatilityfoundation/volatility3/files/4195115/win32k.pdb.json.txt) is a JSON for that file, produced via dia.
DIA is Microsoft's debug library. I built a small prototype around it a few years back to bootstrap Vol3 symbol development. pdbconv is the successor and maintained tool moving forward....