volatility3
volatility3 copied to clipboard
Crashdump writer plugin
This is a PR is instead of #694 because the rebase on that PR was a bit weird. This was tested against 32-bit and 64-bit memory dumps.
@paulkermann LGTM, some of the things you explained were understood. Thank you for checking my reviews. 🙂
@iMHLv2 could you please take a look over the KDBG decoding bits of this? I haven't done a full review yet, but the more eyes we can get on it the better please. 5:)
Any word on this one guys?
This is still waiting on review by @awalters I'm afraid.