You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Good morning,
I am trying to run volatility3 on my PC but I am getting problems as per the picture:
I am also trying to convert the file ntkrnlmp.pdb to JSON with pdbconv.py (*\volatility3-develop\volatility3\framework\symbols\windows\pdbconv. py) to add it to the \volatility3-develop\volatility3\symbols\windows\ntkrnlmp.pdb folder but running the command "python3 pdbconv.py -f krnlmp.pdb -o c:\pdb" I do not get the desired JSON. How can I generate the conversion? Could you please provide support?
Thank you in advance.
PS: I followed this guide "https://medium.com/insomniacs/volatility-3-downloading-windows-symbols-for-volatility-3-on-air-gapped-machines-7bf7a63521c7".
The text was updated successfully, but these errors were encountered:
So the two outputs you've listed suggest it's trying to download the PDB file, but failing. Please could you post the output of trying to run python3 pdbconv.py -f krnlmp.pdb -o c:\pdb that you mentioned? You'll need to have volatility3 installed on the system somewhere, if you're not using the PYTHONPATH environment variable to tell it where the local installation is. It also looks like you provided a directory name, rather than the name of a file to the -o output parameter. Please try something like -o C:\pdb.json, or just leave out the -o parameter and it should display to the screen.
Good morning,
I am trying to run volatility3 on my PC but I am getting problems as per the picture:
I am also trying to convert the file ntkrnlmp.pdb to JSON with pdbconv.py (*\volatility3-develop\volatility3\framework\symbols\windows\pdbconv. py) to add it to the \volatility3-develop\volatility3\symbols\windows\ntkrnlmp.pdb folder but running the command "python3 pdbconv.py -f krnlmp.pdb -o c:\pdb" I do not get the desired JSON. How can I generate the conversion? Could you please provide support?
Thank you in advance.
PS: I followed this guide "https://medium.com/insomniacs/volatility-3-downloading-windows-symbols-for-volatility-3-on-air-gapped-machines-7bf7a63521c7".
The text was updated successfully, but these errors were encountered: