Hyper-V Memory Forensics – MemProcFS to the Rescue!
#HyperV #Memory #Forensics #MemProcFS #Rescue
“13Cubed”
Learn how to properly acquire memory from Microsoft Hyper-V guest virtual machines.
🎉 Update
After I recorded this episode, Ulf Frisk, the author of MemProcFS, let me know that he has made some updates that no longer require you to copy the vmsavedstatedumpprovider.dll file to the MemProcFS…
source