From 3e81344de1347e74f5c6dd64ab49c652c1008238 Mon Sep 17 00:00:00 2001 From: Christos Protopapas <cp2n19@soton.ac.uk> Date: Tue, 5 Sep 2023 15:40:39 +0000 Subject: [PATCH] Update README.md --- README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index ced3075..006283e 100644 --- a/README.md +++ b/README.md @@ -21,7 +21,7 @@ The command to inject it is prepared by the script, and can be made to auto-exec This script allows automated injection of LiME module in the kernel, saving the output file with a timestamped file name, and removes the module from the kernel to allow for repeated executions --**profiler.sh** -Script to download the corresponding kernel symbols in order to create a valid Volatility profile. Due to the way that Linux kernels are built this is a mandatory step in Linux Memory analysis with this specific tool - for more information regarding kernel symbols and documentation refer to the Volatility3 GitHub page [here](https://github.com/volatilityfoundation/volatility3). +Script to download the corresponding kernel symbols in order to create a valid Volatility profile. Due to the way that Linux kernels are built this is a mandatory step in Linux Memory analysis with this specific tool - for more information regarding kernel symbols and documentation refer to the Volatility3 GitHub page [here](https://github.com/volatilityfoundation/volatility3). (Adapted from [here](https://cpuu.hashnode.dev/how-to-perform-memory-forensic-analysis-in-linux-using-volatility-3)) --**rust_builder.sh** and **DumpIt_installer.sh** Originally the choice for memory extraction on Linux systems due to unexpected errors in using LiME (now fixed). 'DumpIt for Linux' is built on Rust, hence the builder script to download and install it, before the 'DumpIt_installer.sh' was run. *Note that this is no longer the case and these two scripts are no longer needed or used, but do remain here for reference.* @@ -29,4 +29,4 @@ Originally the choice for memory extraction on Linux systems due to unexpected e --**Snapshots.xlsx** Simply an excel spreadsheet for me to keep track of the experiment's progress. -***Note: All scripts and paths contained therein assume execution from a user's home directory with sudo priviledges. Paths and results may differ if directories and execution priviledges change.*** \ No newline at end of file +***Note: All scripts and paths contained therein assume execution from a user's home directory with sudo priviledges. Paths and results may differ if directories and execution priviledges change.*** -- GitLab