Jonathan Loh jloh02

## Volatility.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                jloh02
                / Volatility.md
            
            
              Last active
              April 2, 2024 08:03
            
              
                Volatility Cheatsheet
              
          
    Volatility Guide (Windows)

Overview

jloh02's guide for Volatility. I'm by no means an expert. This document was created to help ME understand volatility while learning. My CTF procedure comes first and a brief explanation of each command is below. This guide uses volatility2 and RegRipper
Procedure

Profiling


volatility -f <file_name> imageinfo: Get suggested profiles
After which, use volatility -f <file_name> <command> --profile=<profile>

Registry Dumping and Ripping