Skip to content

Using in Volatility

Daryl Bennett edited this page Jan 3, 2019 · 2 revisions

Great Job! you dumped the RAM

Now how to we use it in Volatility

LiMEaide will automatically transfer the required profile to Volatility. This location is setup when running the application for the first time and checked at every run.

If you need to transfer the profile manually follow the instructions below. LiMEaide profiles can be found in LiMEaide/profiles/

Easy as it can be

Read better examples here

  1. Copy the zip file to [volatility dir]/volatility/plugins/overlays/linux/
  2. Test if Volatility can find it python vol.py --info | grep Linux
  3. Use it! python vol.py -f [path/to/memimage] --profile=[profile name] [volatility plugin]

Clone this wiki locally