M
M
muuttaaks2022-04-15 07:23:52
Windows
muuttaaks, 2022-04-15 07:23:52

Volatility Framework does not find the profile. Has anyone encountered similar?

I fight, I fight with volatility to explore the RAM. The memory dump was done via FTK Imager.
I write as per the instructions:

C:\Users\Admin\Desktop\volatility_2.6_win64_standalone> volatility_2.6_win64_standalone.exe --f mem.mem imageinfo

As a result, the program checks for a long time and issues the following:
INFO : volatility.debug : Determining profile based on KDBG search...
Suggested Profile(s) : No suggestion (Instantiated with no profile)
AS Layer1 : FileAddressSpace (C:\Users\Lenovo\Desktop\vola\mem.mem)
PAE type : No PAE

Dumped from Windows10 ( version 1607)

Answer the question

In order to leave comments, you need to log in

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question