-
Notifications
You must be signed in to change notification settings - Fork 89
Description
This is really cool! I just had a question...
Does this plugin work with 2.6.1 and Windows 10? I'm working with the new version from here -
https://github.com/fireeye/win10_volatility
but getting errors
Name PID Data VA
No suitable address space mapping found
Tried to open image as:
MachOAddressSpace: mac: need base
LimeAddressSpace: lime: need base
WindowsHiberFileSpace32: No base Address Space
WindowsCrashDumpSpace64BitMap: No base Address Space
HPAKAddressSpace: No base Address Space
VMWareAddressSpace: No base Address Space
QemuCoreDumpElf: No base Address Space
WindowsCrashDumpSpace32: No base Address Space
WindowsCrashDumpSpace64: No base Address Space
VMWareMetaAddressSpace: No base Address Space
VirtualBoxCoreDumpElf64: No base Address Space
Win10CompressedAMD64PagedMemory: No base Address Space
Win10CompressedIA32PagedMemoryPae: No base Address Space
SkipDuplicatesAMD64PagedMemory: No base Address Space
WindowsAMD64PagedMemory: No base Address Space
LinuxAMD64PagedMemory: No base Address Space
Win10CompressedIA32PagedMemory: No base Address Space
AMD64PagedMemory: No base Address Space
IA32PagedMemoryPae: No base Address Space