[prev in list] [next in list] [prev in thread] [next in thread]
List: vol-users
Subject: [Vol-users] Determine Windows version from raw image?
From: junkoi2004 () gmail ! com (Jun Koi)
Date: 2008-10-30 20:27:56
Message-ID: fdaac4d50810302007g7ba1f957i8e9ee637c72a7222 () mail ! gmail ! com
[Download RAW message or body]
On Fri, Oct 31, 2008 at 1:14 AM, AAron Walters <awalters@4tphi.net> wrote:
>
> Jun,
>
>>> I know of someone else who would sample the different types of objects
>>> found in memory and use that to determine the OS version.
>>
>> Do you have the link?
>
> Sorry, I don't know of a link. I don't think it was ever publicly released.
>
>>> constraints are, and what information you are willing to trust? If you
>>> end up coming up with a new technique or finding a technique that works well
>>> for you, I would encourage you to submit a plugin.
>>
>> Certainly I would do that if possible.
>
> That's good to hear. There maybe others in the community who would benefit
> as well. Is there something in particular that would not make it possible?
I really mean that if I have time and I can do that.
Thanks,
J
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic