Operator On The Wire
Join
← Back to Knowledge Base
BLUE TEAM / DFI / MEMORY / DUMP / VOLATILITY / Users

sessions

Commands

# List loaded DLLs for process (Vol2)  
vol.py -f <mem> --profile=<profile> sessions  
  
# List loaded DLLs (Vol3)  
python3 vol.py -f <mem> windows.sessions