Now lets dump the hashed for “Win7SP1x64” using the module “hashdump”. $ python /opt/tools/volatility/vol.py -f Snapshot6.vmem --profile=Win7SP1x64 hashdump
確定! 回上一頁