Skip to content

Commit d9a6ff8

Browse files
authored
Update getting-started-linux-tutorial.rst
Update memory acquisition section: remove deprecated LiME reference LiME has been removed from the documentation due to its unmaintained status. The section now highlights AVML as an actively maintained tool, and includes a general note encouraging users to verify tool compatibility.
1 parent 9df5300 commit d9a6ff8

File tree

1 file changed

+2
-3
lines changed

1 file changed

+2
-3
lines changed

doc/source/getting-started-linux-tutorial.rst

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -6,12 +6,11 @@ This guide will give you a brief overview of how volatility3 works as well as a
66
Acquiring memory
77
----------------
88

9-
Volatility3 does not provide the ability to acquire memory. Below are some examples of tools that can be used to acquire memory, but more are available:
9+
Volatility3 does not provide the ability to acquire memory. Below is an example of a tool that can be used to acquire memory on Linux systems:
1010

1111
* `AVML - Acquire Volatile Memory for Linux <https://github.com/microsoft/avml>`_
12-
* `LiME - Linux Memory Extract <https://github.com/504ensicsLabs/LiME>`_
1312

14-
Be aware that LiME raw format is not supported by volatility3, the padded or lime option should be used instead. `This issue contains further information <https://github.com/504ensicsLabs/LiME/issues/111>`_.
13+
Other tools may exist, but please verify their maintenance status and compatibility with volatility3 before use.
1514

1615
Procedure to create symbol tables for linux
1716
-------------------------------------------

0 commit comments

Comments
 (0)