Just to share some profiles I made for analyzing Ubuntu (Linux) memory dumps in Volatility.
Profiles were made according to the instructions in http://code.google.com/p/volatility/wiki/LinuxMemoryForensics
- Ubuntu 3.2.0-23 generic pae
- Ubuntu 3.2.0-31 generic pae
- Ubuntu 3.2.0-32 generic pae
- Ubuntu 3.2.0-33 generic pae
- Ubuntu 3.2.0-34 generic pae
- Ubuntu 3.2.0-35 generic pae
- Ubuntu 3.2.0-36 generic pae
- Ubuntu 3.2.0-37 generic pae
- Ubuntu 3.2.0-38 generic pae
- Ubuntu 3.2.0-39 generic pae
- Ubuntu 3.2.0-40 generic pae
- Ubuntu 3.2.0-41 generic pae
- Ubuntu 3.2.0-43 generic pae
- Ubuntu 3.2.0-44 generic pae
- Ubuntu 3.2.0-45 generic pae
- Ubuntu 3.2.0-48 generic pae
- Ubuntu 3.2.0-49 generic pae
- Ubuntu 3.2.0-53 generic pae
- Ubuntu 3.2.0-54 generic pae
- Ubuntu 3.2.0-55 generic pae
- Ubuntu 3.2.0-56 generic pae
- Ubuntu 3.2.0-57 generic pae
- Ubuntu 3.5.0-27 generic
- Ubuntu 3.5.0-28 generic
- Ubuntu 3.5.0-30 generic
- Ubuntu 3.5.0-31 generic
- Ubuntu 3.5.0-32 generic
- Ubuntu 3.8.0-19 generic
- Ubuntu 3.8.0-26 generic
- Ubuntu 3.8.0-27 generic
- Ubuntu 3.8.0-29 generic
- Ubuntu 3.8.0-30 generic
HTH!
2 thoughts on “Ubuntu profiles for Volatility”