D2Winpmem

Use the D2 agent to carry the winpmem binary to a system and return the memory dump file to the war room. This usually takes a while, depending on amount of RAM in the target system.

javascript · D2 (Deprecated)

Details

ID	`D2Winpmem`
Language	javascript
From Version	5.0.0
Tags	agent memory forensics

README

Carries the winpmem binary to a system and returns the memory dump file to the War Room. The amount of time this takes will depend on the amount of RAM in the target system.

Script Data

Name	Description
Script Type	javascript
Tags	agent, memory, forensics

Inputs

There are no inputs for this script.

Outputs

There are no outputs for this script.

Source

D2Winpmem.js D2Winpmem.yml

Download History Raw

commonfields:
  id: D2Winpmem
  version: -1
name: D2Winpmem
script: ''
type: javascript
tags:
- agent
- memory
- forensics
comment: Use the D2 agent to carry the winpmem binary to a system and return the memory
  dump file to the war room. This usually takes a while, depending on amount of RAM
  in the target system.
system: true
scripttarget: 1
dependson: {}
timeout: 0s
fromversion: 5.0.0
tests:
- no test