Tamas K Lengyel comments

Results 224 comments of


                                            Tamas K Lengyel

RDTSC can be trapped, yes. I don't think you can trap clflush.

You don't need to run win-guid on an Ubuntu VM.

You want to use dwarf2json to generate Linux jsons: https://github.com/volatilityfoundation/dwarf2json

Yes, you need the kernel version with the dwarf debug symbols present. The normal kernel versions have those stripped.

I would bet it's just an oversight and those were the only events the author of the feature cared about.

@drakvuf-jenkins Test this please

@drakvuf-jenkins Retest this please

@drakvuf-jenkins Retest this please

@drakvuf-jenkins Test this please

@drakvuf-jenkins Retest this please