-
Notifications
You must be signed in to change notification settings - Fork 482
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
MacOS Profile: macOS Monterey #747
Comments
Hello @GordonChaiCheenShun, |
Additional, It is not recommended to raise the same issue with many repositories unless you need it. Not only does it not guarantee a quick answer, but it can also confuse the maintainer. Before you raise an issue, consider what repositories are appropriate for the issues you face.. :) |
Volatility 3 would support it, but I don't know if it's the default set of system tables, or whether it's too recent. If it's too recent, you can examine the files here or use dwarf2json directly to generate your own profile, based on the documentation for making symbol tables. As @digitalisx pointed out, the tables generated would not run under volatility 2.6, and I believe support for vol 2.6 was due to end in August to 2021 so it might be hopeful to think it will one day support more recent mac kernels. I hope this helps, you can get more interactive support by asking questions on our slack channel (for both vol 2 and vol 3). As such I'm going to close this issue (since it's open in two more appropriate places), but feel free to reopen it if you feel there's more to add to the discussion. 5:) |
Hi, Did volatility support MacOS Monterey version 12.0.1 profile?
I am having issue with "Unable to find an OS X profile for the given memory sample.
The text was updated successfully, but these errors were encountered: