Forum Discussion

CapsLockSingh's avatar
CapsLockSingh
Icon for Bronze I rankBronze I
14 days ago

Help in Volatility Memory Analysis: Ep.2 – Processes and DLLs

Hello everyone, I started with Volatility memory analysis and am stuck in question 13 on SID It ask for first SID that is returned which in this case seems to be "S-1-5-18" (Maybe I am wrong here...
defensive cyber
TillyCorless's avatar
TillyCorless
Icon for Community Manager rankCommunity Manager
14 days ago

Hey CapsLockSingh, thanks for the question. It looks like MarcioMota has most recently completed this lab - I wonder if they might be able to give you a tip 👀

  • MarcioMota's avatar
    MarcioMota
    Icon for Bronze I rankBronze I
    14 days ago

    Hi CapsLockSingh, hope you are doing well. So I just issued the command with the "-" before the "p" for the parameter and I got the results below. The Lab is expecting the full SID number.

    I hope it can help.

    • KieranRowley's avatar
      KieranRowley
      Icon for Community Manager rankCommunity Manager
      13 days ago

      Great spot!