NC State Active Directory

Mar 08, 2015 · Install memoryze and create an output directory. From admin cmd prompt: “C:\Program Files\MANDIENT\ MEmoryze \MemoryDD.bat” –output Grab image, take to forensics station. From CMD prompt: Process list. volatility.exe . pslist –f < imgFile > --profile=Win7SP1x86. Network connections. volatility.exe . timeliner –f < imgFile ................
................