security - How to dump memory image OSX Yosemite? -
i'm trying dump memory image osx yosemite. point, macmemoryze, doesn't support 10.10. know of way dump memory image file can loaded in volatility? did little searching around , didn't find immediately.
thanks!
osxpmem rekall can dump osx 10.10. see:
http://rekall-forensic.blogspot.de/2015/04/the-pmem-memory-acquisition-suite.html
Comments
Post a Comment