Skip to content

Releases: Velocidex/WinPmem

Release 4.0 RC2

12 Oct 01:09
@scudette scudette
v4.0.rc1
8b712ab
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
Release 4.0 RC2 Latest
Latest

This release fixes an issue with the drivers loading on recent Windows versions.

For this release we make available the old "mini" pmem imager based on the old 1.6 branch. This imager is very simple - it can only make raw images. The AFF4 based imager may be back in the future but for now we can produce RAW images.

We started to distribute Winpmem releases directly from this project as it is now separated from the Rekall project (which has been discontinued).

The new drivers implement Fast IO mode so should be faster than before.

There is now also an experimental Go userspace imager which supports 3 methods of compression (Snappy, S2 and Gzip). Use the -h flag to see usage instruction.

Thanks

We would like to thank Emre Tinaztepe and Mehmet GÖKSU at Binalyze as well as Viviane Zwanger for making this release possible.

Assets 5
Loading