VolDlllist

Volatility script for command ldrmodules

Details

ID	`VolDlllist`
Language	javascript
From Version	5.0.0
Tags	memory forensics volatility server

README

The Volatility script for command ldrmodules.

Script Data

Name	Description
Script Type	javascript
Tags	memory, forensics, volatility, server

Inputs

Argument Name	Description
memdump	The path to memory dump the file on the system being used.
system	The system with Volatility installed to be used for the analysis.
pid	The process ID to pass to Volatility as a parameter of the `dlllist` command.
profile	The Volatility profile to use.

Outputs

There are no outputs for this script.

Source

VolDlllist.js VolDlllist.yml

Download History Raw

commonfields:
  id: VolDlllist
  version: -1
name: VolDlllist
script: ''
type: javascript
tags:
- memory
- forensics
- volatility
- server
comment: Volatility script for command ldrmodules
system: true
args:
- name: memdump
  required: true
  description: Path to memory dump file on the system being used
- name: system
  required: true
  description: System with Volatility installed to be used for the analysis
- name: pid
  required: true
  description: Process ID to pass to volatility as a parameter of the dlllist command
- name: profile
  description: Volatility profile to use
scripttarget: 0
dependson: {}
timeout: 0s
fromversion: 5.0.0