The psxview plugin

As with psscan, the psxview plugin is used to find and list hidden processes. With psxview however, a variety of scans are run, including pslist and psscan.

The command to run the psxview plugin is as follows:

volatility --profile=WinXPSP3x86 -f cridex.vmem psxview
..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset