Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

请问支持linux_lime取证吗 #6

Open
SupinX opened this issue Jan 17, 2024 · 2 comments
Open

请问支持linux_lime取证吗 #6

SupinX opened this issue Jan 17, 2024 · 2 comments

Comments

@SupinX
Copy link

SupinX commented Jan 17, 2024

No description provided.

@Tokeii0
Copy link
Owner

Tokeii0 commented Jan 17, 2024

不支持

@Randark-JMT
Copy link

@SupinX 根据 Volatility 的 wiki，volatility本身支持Lime制作的内存完整转储（Lime Address Space），但是 VolatilityPro 本身仅针对 windows 的内存镜像提供支持，而且 Linux 类的内存镜像的解析依赖于自定义生成的 kernel profile 文件，暂时没有成熟的工具能做到自动化分析

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@SupinX @Randark-JMT @Tokeii0