Skip to content

Instantly share code, notes, and snippets.

@Cyrhades
Last active May 2, 2025 07:50
Show Gist options
  • Save Cyrhades/695c794f092f851d4f337e84ff15c67e to your computer and use it in GitHub Desktop.
Save Cyrhades/695c794f092f851d4f337e84ff15c67e to your computer and use it in GitHub Desktop.
Analyse mémoire - Pour commencer (2/2)
# En utilisant Volatility 3
### **Obtenir le nom de l'application et le nom du fichier**
`vol -f /mnt/c/Users/cyrha/Desktop/demo/file.dmp windows.cmdline`
Il suffit de les retrouver dans le résultat
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment