This article describes the plug-in volatility with a unified output. There are many excellent resources for studying Volatility available. The author of the article wrote an absolute guide for beginners on writing your first plugin.
The purpose of this work is to write a plugin that lists the running processes from the sample Win7SP1x64. You may learn more details of the algorithm for writing the first volatility plug-in with a unified output here.
DISCLAIMER: THIS POST IS FOR INFORMATIONAL PURPOSES ONLY AND IS NOT TO BE CONSIDERED LEGAL ADVICE ON ANY SUBJECT MATTER. DIGITAL FORENSICS CORP. IS NOT A LAWFIRM AND DOES NOT PROVIDE LEGAL ADVICE OR SERVICES. By viewing posts, the reader understands there is no attorney-client relationship, the post should not be used as a substitute for legal advice from a licensed professional attorney, and readers are urged to consult their own legal counsel on any specific legal questions concerning a specific situation.
