Figure 9
Figure 9: Using Volatility to identify the operation system associated with the memory image file.
Figure 9: Using Volatility to identify the operation system associated with the memory image file.