Comments (3)
I believe the format of the ioctl was changed with the most recent drivers. I don't know that the python code was updated - we don't use it really.
Can you successfully image using the c userspace program?
from winpmem.
Yes, we can currently use the winpmem exe to image.
Do you have any idea what the ioctrl setting would need to be updated to? Or documentation I could look into?
from winpmem.
This is the struct that gets passed in the ioctl
https://github.com/Velocidex/WinPmem/blob/master/kernel/userspace_interface/winpmem_shared.h
You need to update the layout here
https://github.com/google/rekall/blob/55d1925f2df9759a989b35271b4fa48fc54a1c86/tools/windows/winpmem/winpmem.py#L85
The ioctl numbers used now are here
https://github.com/Velocidex/WinPmem/blob/master/kernel/userspace_interface/ctl_codes.h
so you have to change them in the python code
https://github.com/google/rekall/blob/55d1925f2df9759a989b35271b4fa48fc54a1c86/tools/windows/winpmem/winpmem.py#L56
from winpmem.
Related Issues (20)
- 4.0 Release Timeline (?) HOT 7
- Winpmem with mimikatz HOT 1
- Are there Mac and Linux releases? HOT 8
- Winpmem help needed HOT 2
- Current binaries with logical file options? HOT 11
- Add flush after printf HOT 2
- Can WinPmem dump gpu memory? HOT 2
- Missing some checks in the user program to add ?
- Failures to dump (winpmem 4.0 rc2) related to pagefile size. HOT 1
- AFF4 support HOT 1
- memmap performance HOT 2
- BSOD Errors HOT 3
- Latest Version? HOT 2
- can't dump RAM HOT 3
- Unable to communicate with winpmem driver. HOT 1
- How should I install and use software to call DLLs? HOT 2
- BSOD (SYSTEM_THREAD_EXCEPTION_NOT_HANDLED) on windows 10 HOT 5
- windows.memory.acquisition not working HOT 1
- Error while capturing dump HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from winpmem.