MoVP II – 1.3 – VMware Snapshot and Saved State Analysis
by Volatility | May 16, 2013 | movp, vmware, volatility
VMware is arguably the most popular virtualization software used in production and research. However, there are various versions of VMware (Workstation, Fusion, ESX Server, etc) and not all of them write raw memory dumps with .vmem extensions for guest VMs....MoVP II – 1.2 – VirtualBox ELF64 Core Dumps
by Volatility | May 15, 2013 | movp, virtualbox, volatility, windows
Volatility can analyze memory dumps from VirtualBox virtual machines. This capability was developed by contributor Philippe Teuwen, who wrote the initial Address Space and detailed much of the acquisition, file format, and other intricacies related to this exciting...MoVP II – 1.1 – Mach-O Address Space
by Volatility | May 14, 2013 | macosx, movp, volatility
One of the major new features of the Volatility 2.3 release is official support for memory dumps from Mac OSX systems. We support over 38 versions of Mac, from 10.5 to 10.8.3 Mountain Lion, both 32- and 64-bit kernels. Over the next month you’ll be exposed to...What’s Happening in the World of Volatility?
by Volatility | May 13, 2013 | contest, forensics, malware, movp, omfw, training, volatility
Volatility is not just an advanced open-source memory forensics framework for Windows, Linux, Mac, and Android. Its a community, an attitude, a lifestyle, and every day it grows in popularity, maturity, and integrity. This post will summarize some of the upcoming...
You must be logged in to post a comment.