Sunday, December 23, 2012
Added environment variable recovery from pagefiles to volatile reader
I added string search support to page files inside volatile reader, and used that as an opportunity to add environment variable recovery as well. The following pagefile was taken from a 64-bit windows 7 VM and was 4.3 GB. The code is in github.
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment