Forum Discussion

CapsLockSingh's avatar
CapsLockSingh
Icon for Bronze I rankBronze I
9 months ago
Solved

Help in Volatility Memory Analysis: Ep.2 – Processes and DLLs

Hello everyone, I started with Volatility memory analysis and am stuck in question 13 on SID It ask for first SID that is returned which in this case seems to be "S-1-5-18" (Maybe I am wrong here...
defensive cyber
  • MarcioMota's avatar
    MarcioMota
    9 months ago

    Hi CapsLockSingh, hope you are doing well. So I just issued the command with the "-" before the "p" for the parameter and I got the results below. The Lab is expecting the full SID number.

    I hope it can help.

MarcioMota's avatar
MarcioMota
Icon for Bronze I rankBronze I
9 months ago

Hi CapsLockSingh, hope you are doing well. So I just issued the command with the "-" before the "p" for the parameter and I got the results below. The Lab is expecting the full SID number.

I hope it can help.

KieranRowley's avatar
KieranRowley
Icon for Community Manager rankCommunity Manager
9 months ago

Great spot!