Volatility Notes
From Simson Garfinkel
To decompress a windows hibernation file using volatility, the syntax is:
$ volatility hibinfo -f hiberfil.sys -d hiberfil.sys.decomp
- This page was last modified on 4 December 2010, at 15:53.
- This page has been accessed 171 times.
- Content is available under Attribution-Noncommercial-No Derivative Works 3.0 Unported.
