AnalyzeMemImage

Use Volatility to run common memory image analysis commands

Details

ID	`AnalyzeMemImage`
Language	javascript
From Version	5.0.0
Tags	memory forensics volatility server

README

Runs common memory image analysis commands.

Script Data

Name	Description
Script Type	javascript
Tags	memory, forensics, volatility, server

Inputs

Argument Name	Description
memdump	The path to memory dump the file on the system being used.
system	The system with `Volatility` installed to be used for the analysis.

Outputs

There are no outputs for this script.

Source

AnalyzeMemImage.js AnalyzeMemImage.yml

Download History Raw

commonfields:
  id: AnalyzeMemImage
  version: -1
name: AnalyzeMemImage
script: ''
type: javascript
tags:
- memory
- forensics
- volatility
- server
comment: Use Volatility to run common memory image analysis commands
system: true
args:
- name: memdump
  required: true
  default: true
  description: Path to memory dump file on the system being used
- name: system
  required: true
  description: System with Volatility installed to be used for the analysis
scripttarget: 0
dependson: {}
timeout: 0s
fromversion: 5.0.0