Eccouncil Exam 212-89 Topic 3 Question 55 Discussion

Actual exam question for Eccouncil's 212-89 exam

Question #: 55
Topic #: 3

John is performing memory dump analysis in order to find out the traces of malware.

He has employed volatility tool in order to achieve his objective.

Which of the following volatility framework commands he will use in order to analyze running process from the memory dump?

Apython vol.py svcscan --profile=Win2008SP1x86 --f /root/Desktop/memdump.mem | more

Bpython vol.py pslist --profile=Win2008SP1x86 --f /root/Desktop/memdump.mem

Cpython vol.py hivelist --profile=Win2008SP1x86 --f /root/Desktop/memdump.mem

Dpython vol.py imageinfo -f /root/Desktop/memdump.mem

Show Suggested Answer

Suggested Answer: B

by Lina at Apr 29, 2024, 09:17 PM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!