±Forensic Focus Partners

Become an advertising partner

±Your Account


Forgotten password/username?

Site Members:

New Today: 1 Overall: 35413
New Yesterday: 5 Visitors: 134

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Webinars

Volatility Framework - Mac OS X Profile

Forensic software discussion (commercial and open source/freeware). Strictly no advertising.
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts


Volatility Framework - Mac OS X Profile

Post Posted: Aug 16, 18 12:15


Does anyone know if downloading the symbols for older MAC OS X versions and building a profile from a updated MAC OS X device works? I recently had a slew of failures attempting this on my own. But I suspect my memory images are the issue...


I am interpreting what I am reading that following the steps in the link should be sufficient from any base OS version of MAC OS X.  


Re: Volatility Framework - Mac OS X Profile

Post Posted: Sep 13, 18 06:15

I create the profiles using this tutorial: ponderthebits.com/2017...olatility/

I use my macOS workstation to create the different profiles, changing the DebugKit to the distribution and build i want to create that profile for (this is better choice to have the profiles ready before an incident appear and avoid the corruption of the target machine).

I hope i helped you, Regards,


Page 1 of 1