'How to get the specific file(txt) with volatility?
I tried to filescan,and I see the .txt I want to open.But how can I open the txt?
I am new with volatility,and I tried more than 6 hours to get the txt.I tried dumpfiles,but I finally get lots of files that does'nt match the file I want to get.
Solution 1:[1]
get the imagebaseadress of the file and run db(imagebaseadress) inside volshell you should see the contents
Sources
This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.
Source: Stack Overflow
| Solution | Source |
|---|---|
| Solution 1 | Cv Nikhil |