Forensic

Friday 18 June 2021, 14:29  #1
Forensic - Find me back
Christine
  • 1 posts

Hi, when I downloaded ch25.xz and extracted it, there were 2 files: .raw and .dmp in there. Then I used volatility to scan for their imageinfo, yet I couldn’t find any info. What should I do in this case, I’ve been stuck here for days. Thank you for your help.

Friday 18 June 2021, 14:38  #2
Forensic - Find me back
das
das
  • 57 posts

imageinfo can only match a specific OS version to a profile it already knows about. Maybe the profile is missing!