Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- [root@nas]~/ritsec/volatility_2.6_lin64_standalone >./volatility_2.6_lin64_standalone --plugins=CentOS --profile=LinuxCentos7-3_10_0-862_2_3_el7_x86_64x64 -f memorydump linux_memmap
- Volatility Foundation Volatility Framework 2.6
- Task Pid Virtual Physical Size
- ---------------- -------- ------------------ ------------------ ------------------
- No suitable address space mapping found
- Tried to open image as:
- MachOAddressSpace: mac: need base
- LimeAddressSpace: lime: need base
- WindowsHiberFileSpace32: No base Address Space
- WindowsCrashDumpSpace64BitMap: No base Address Space
- WindowsCrashDumpSpace64: No base Address Space
- HPAKAddressSpace: No base Address Space
- VMWareMetaAddressSpace: No base Address Space
- VirtualBoxCoreDumpElf64: No base Address Space
- QemuCoreDumpElf: No base Address Space
- VMWareAddressSpace: No base Address Space
- WindowsCrashDumpSpace32: No base Address Space
- Win10AMD64PagedMemory: No base Address Space
- WindowsAMD64PagedMemory: No base Address Space
- LinuxAMD64PagedMemory: No base Address Space
- AMD64PagedMemory: No base Address Space
- IA32PagedMemoryPae: No base Address Space
- IA32PagedMemory: No base Address Space
- OSXPmemELF: No base Address Space
- MachOAddressSpace: MachO Header signature invalid
- MachOAddressSpace: MachO Header signature invalid
- LimeAddressSpace: Invalid Lime header signature
- WindowsHiberFileSpace32: PO_MEMORY_IMAGE is not available in profile
- WindowsCrashDumpSpace64BitMap: Header signature invalid
- WindowsCrashDumpSpace64: Header signature invalid
- HPAKAddressSpace: Invalid magic found
- VMWareMetaAddressSpace: VMware metadata file is not available
- VirtualBoxCoreDumpElf64: ELF Header signature invalid
- QemuCoreDumpElf: ELF Header signature invalid
- VMWareAddressSpace: Invalid VMware signature: 0x0
- WindowsCrashDumpSpace32: Header signature invalid
- Win10AMD64PagedMemory: Incompatible profile LinuxCentos7-3_10_0-862_2_3_el7_x86_64x64 selected
- WindowsAMD64PagedMemory: Incompatible profile LinuxCentos7-3_10_0-862_2_3_el7_x86_64x64 selected
- LinuxAMD64PagedMemory: Failed valid Address Space check
- AMD64PagedMemory: Failed valid Address Space check
- IA32PagedMemoryPae: Incompatible profile LinuxCentos7-3_10_0-862_2_3_el7_x86_64x64 selected
- IA32PagedMemory: Incompatible profile LinuxCentos7-3_10_0-862_2_3_el7_x86_64x64 selected
- OSXPmemELF: ELF Header signature invalid
- FileAddressSpace: Must be first Address Space
- ArmAddressSpace: Failed valid Address Space check
- [root@nas]~/ritsec/volatility_2.6_lin64_standalone >./volatility_2.6_lin64_standalone --plugins=CentOS --profile=LinuxCentos7-3_10_0-862_el7_x86_64x64 -f memorydump linux_memmap
- Volatility Foundation Volatility Framework 2.6
- Task Pid Virtual Physical Size
- ---------------- -------- ------------------ ------------------ ------------------
- No suitable address space mapping found
- Tried to open image as:
- MachOAddressSpace: mac: need base
- LimeAddressSpace: lime: need base
- WindowsHiberFileSpace32: No base Address Space
- WindowsCrashDumpSpace64BitMap: No base Address Space
- WindowsCrashDumpSpace64: No base Address Space
- HPAKAddressSpace: No base Address Space
- VMWareMetaAddressSpace: No base Address Space
- VirtualBoxCoreDumpElf64: No base Address Space
- QemuCoreDumpElf: No base Address Space
- VMWareAddressSpace: No base Address Space
- WindowsCrashDumpSpace32: No base Address Space
- Win10AMD64PagedMemory: No base Address Space
- WindowsAMD64PagedMemory: No base Address Space
- LinuxAMD64PagedMemory: No base Address Space
- AMD64PagedMemory: No base Address Space
- IA32PagedMemoryPae: No base Address Space
- IA32PagedMemory: No base Address Space
- OSXPmemELF: No base Address Space
- MachOAddressSpace: MachO Header signature invalid
- MachOAddressSpace: MachO Header signature invalid
- LimeAddressSpace: Invalid Lime header signature
- WindowsHiberFileSpace32: PO_MEMORY_IMAGE is not available in profile
- WindowsCrashDumpSpace64BitMap: Header signature invalid
- WindowsCrashDumpSpace64: Header signature invalid
- HPAKAddressSpace: Invalid magic found
- VMWareMetaAddressSpace: VMware metadata file is not available
- VirtualBoxCoreDumpElf64: ELF Header signature invalid
- QemuCoreDumpElf: ELF Header signature invalid
- VMWareAddressSpace: Invalid VMware signature: 0x0
- WindowsCrashDumpSpace32: Header signature invalid
- Win10AMD64PagedMemory: Incompatible profile LinuxCentos7-3_10_0-862_el7_x86_64x64 selected
- WindowsAMD64PagedMemory: Incompatible profile LinuxCentos7-3_10_0-862_el7_x86_64x64 selected
- LinuxAMD64PagedMemory: Failed valid Address Space check
- AMD64PagedMemory: Failed valid Address Space check
- IA32PagedMemoryPae: Incompatible profile LinuxCentos7-3_10_0-862_el7_x86_64x64 selected
- IA32PagedMemory: Incompatible profile LinuxCentos7-3_10_0-862_el7_x86_64x64 selected
- OSXPmemELF: ELF Header signature invalid
- FileAddressSpace: Must be first Address Space
- ArmAddressSpace: Failed valid Address Space check
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement