[Pauldotcom] Imaging memory on Win7 64bit
dphull at trustedsignal.com
Tue Sep 21 23:52:02 UTC 2010
I asked and got an answer. Volatility has had support for 32 bit Vista
and Win7 for some time. Some of the contributors have 64 bit working,
but that code has not made it into the project yet, but "will probably
make it into an upcoming release."
If you need 64 bit support, you may want to lurk on the developer
mailing list for a bit and ask if someone could share that code with
On Tue, Sep 21, 2010 at 3:57 PM, Dave Hull <dphull at trustedsignal.com> wrote:
> Actually, Volatility has had support for Vista memory dumps for a
> while now. I'm checking into support for 64-bit images.
> I believe @gleeda on Twitter may know the answer.
> On Fri, Sep 17, 2010 at 7:03 PM, Bugbear <gbugbear at gmail.com> wrote:
>> Volatility _ xp only unless something recently changed
>> On 9/17/10, Carlos Perez <carlos_perez at darkoperator.com> wrote:
>>> Isn't Volatility limited to XP memory dumps?
More information about the Pauldotcom