[Pauldotcom] Imaging memory on Win7 64bit

[Dave Hull]

I asked and got an answer. Volatility has had support for 32 bit Vista
and Win7 for some time. Some of the contributors have 64 bit working,
but that code has not made it into the project yet, but "will probably
make it into an upcoming release."

If you need 64 bit support, you may want to lurk on the developer
mailing list for a bit and ask if someone could share that code with
you.

Good luck.

On Tue, Sep 21, 2010 at 3:57 PM, Dave Hull <dphull at trustedsignal.com> wrote:
> Actually, Volatility has had support for Vista memory dumps for a
> while now. I'm checking into support for 64-bit images.
>
> I believe @gleeda on Twitter may know the answer.
>
> On Fri, Sep 17, 2010 at 7:03 PM, Bugbear <gbugbear at gmail.com> wrote:
>> Volatility _ xp only unless something recently changed
>>
>> On 9/17/10, Carlos Perez <carlos_perez at darkoperator.com> wrote:
>>> Isn't Volatility limited to XP memory dumps?