volatility3 icon indicating copy to clipboard operation
volatility3 copied to clipboard

Support for process memory dump on Mac

Open aleksf opened this issue 4 years ago • 2 comments

Is your feature request related to a problem? Please describe. Volatility version 2 has a number of Mac plugins that supported dumping the memory, in version 3 none of the plugins seem to support it.

Describe the solution you'd like Please implement process memory dump support for Mac in Volatility version 3.

Describe alternatives you've considered I am not aware of any current alternatives, v2 helper scripts to generate symbols for latest MacOS kernels are broken, therefore v2 cannot be used anymore.

Additional information N/A - should be clear from description

aleksf avatar Mar 25 '21 11:03 aleksf

Looks like one for @atcuno 5;)

ikelos avatar Mar 25 '21 11:03 ikelos

@atcuno, just checking progress on various bugs. This one's definitely up your street, but hasn't seen much progress...

ikelos avatar Sep 05 '21 10:09 ikelos

This issue is stale because it has been open for 200 days with no activity.

github-actions[bot] avatar Nov 28 '23 01:11 github-actions[bot]

This issue was closed because it has been inactive for 60 days since being marked as stale.

github-actions[bot] avatar Jan 28 '24 01:01 github-actions[bot]

Reopening this because it's still a valid request and we should add support into the framework...

ikelos avatar Jan 28 '24 23:01 ikelos