Source
var cmdline = 'apihooks -p ' + args.pid; var out = executeCommand('Volatility', {memdump:args.memdump, profile:args.profile, system: args.system, cmd:cmdline}); return out;
README
Is a volatility script for command apihooks.
Script Data
| Name | Description |
|---|---|
| Script Type | javascript |
| Tags | memory, forensics, volatility, server |
Inputs
| Argument Name | Description |
|---|---|
| memdump | The path to memory dump file on the system being used. |
| system | The system with Volatility installed to be used for the analysis. |
| pid | The process ID to pass to Volatility as a parameter of the apihooks command. |
| profile | The Volatility profile to use. |
Outputs
There are no outputs for this script.