volatility3 icon indicating copy to clipboard operation
volatility3 copied to clipboard

Support to run against multiple memory images

Open ikelos opened this issue 4 years ago • 0 comments

Is your feature request related to a problem? Please describe. It would be useful to run the same plugin against multiple memory images and have the output one after the other. (This, in particular, for throwing a number of images at the automagic and having error messages bunched up, for example for finding the windows PDB signatures needed for a number of images).

Describe the solution you'd like Allow the CLI to accept multiple different memory images and run the chosen plugin against each of them one after the other.

Describe alternatives you've considered Writing bash/powershell scripting to repeatedly re-run volatility, which would work but is cumbersome and requires a separate script.

Additional information

ikelos avatar Jan 25 '21 12:01 ikelos