Skip to content

Commit 0f33734

Browse files
authored
Update getting-started-linux-tutorial.rst : Add reference to Abyss-W4tcher/volatility3-symbols
Recommend users first check this repository for pre-generated symbol tables by kernel version for popular Linux distributions before creating their own.
1 parent d9a6ff8 commit 0f33734

File tree

1 file changed

+7
-2
lines changed

1 file changed

+7
-2
lines changed

doc/source/getting-started-linux-tutorial.rst

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -12,14 +12,19 @@ Volatility3 does not provide the ability to acquire memory. Below is an example
1212

1313
Other tools may exist, but please verify their maintenance status and compatibility with volatility3 before use.
1414

15-
Procedure to create symbol tables for linux
15+
Procedure to create symbol tables for Linux
1616
-------------------------------------------
1717

18-
To create a symbol table please refer to :ref:`symbol-tables:Mac or Linux symbol tables`.
18+
It is recommended to first check the repository `volatility3-symbols <https://github.com/Abyss-W4tcher/volatility3-symbols>`_ for pre-generated JSON.xz symbol table files.
19+
This repository provides files organized by kernel version for popular Linux distributions such as Debian, Ubuntu, and AlmaLinux.
20+
21+
If you cannot find a suitable symbol table for your kernel version there, please refer to :ref:`symbol-tables:Mac or Linux symbol tables` to create one manually.
22+
1923
After creating the file, place it under the directory ``volatility3/symbols``.
2024
Volatility3 will automatically detect and use symbol tables from this location.
2125

2226

27+
2328
Listing plugins
2429
---------------
2530

0 commit comments

Comments
 (0)