Answer the question
In order to leave comments, you need to log in
Volatility Framework does not find the profile. Has anyone encountered similar?
I fight, I fight with volatility to explore the RAM. The memory dump was done via FTK Imager.
I write as per the instructions:
C:\Users\Admin\Desktop\volatility_2.6_win64_standalone> volatility_2.6_win64_standalone.exe --f mem.mem imageinfo
As a result, the program checks for a long time and issues the following:
INFO : volatility.debug : Determining profile based on KDBG search...
Suggested Profile(s) : No suggestion (Instantiated with no profile)
AS Layer1 : FileAddressSpace (C:\Users\Lenovo\Desktop\vola\mem.mem)
PAE type : No PAE
Dumped from Windows10 ( version 1607)
Answer the question
In order to leave comments, you need to log in
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question