December 2017
Intermediate to advanced
274 pages
5h 46m
English
As we'll soon see, all plugins in the Volatility Framework are used through the Terminal. To make access to the image file easier by not having to specify a lengthy path to the image, we have moved the cridex.vmem image to the Desktop:

We can also change the directory to the Desktop and then run the Volatility Framework and its plugins from there. To do this, we open a new Terminal and type the following command:
cd Desktop
We can also view the contents of the Desktop to ensure that the cridex.vmem file is present by typing ls -l:
Read now
Unlock full access