Mike Cohen

@ilay122 Ah ok good to know! If it is available then it would be obviously the easiest solution :-) Thanks for the tip :+1:

Sorry not just yet. I will have to port the project to the latest VS to make it work with the latest DDK so it might be a bit more...

There has been a lot of work done on Winpmem by Viviane here https://github.com/Velocidex/WinPmem and it is almost ready for the next release. The new code not only works on...

Just to clarify. VSM (sometimes called memory guard) uses a hypervisor and in that case reading memory actually fails. The imager has to go back and mark certain pages as...

I have rebuilt the latest linpmem on ubuntu 18.04 LTS which should work also on RHEL - The new binary is in the latest release. Please check if it works...

You should allow the output volume to be aff4 to write multiple streams. On windows raw devices are of the form \\.\C: 

Still waiting on CLA for this. Please also check indentation - seems to be wrong in places.

This seems to be a convenience patch at best - it just saves a user from adding a * after the file name - i.e. `aff4imager -e foobar image.aff4.*`. Do...

Linpmem uses a different implementation of WriteMapObject_ than Winpmem because Winpmem needs to be able to handle failed reads (for VSM support). We need to update it to the new...

This does not make any sense - why would the last chunk need to be padded? It is obviously shorter than chunk size.