mikaelkall/forensics

Created March 3, 2018 13:01

Star () You must be signed in to star a gist
Fork () You must be signed in to fork a gist

Learn more about clone URLs
Clone this repository at <script src="https://gist.github.com/mikaelkall/45d26016f0a8bcaebc8b4d9664fc712c.js"></script>
Save mikaelkall/45d26016f0a8bcaebc8b4d9664fc712c to your computer and use it in GitHub Desktop.

Download ZIP

Forensics

Raw

	# Dump VM meory on Virtualbox

	vboxmanage debugvm dumpvmcore Windows10 --filename windows10.img

	volatility -f windows10.img vboxinfo

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment