[Gllug] Memory scanning
rich at annexia.org
Sat Sep 4 22:21:52 UTC 2010
On Sat, Sep 04, 2010 at 09:21:51PM +0100, James Courtier-Dutton wrote:
> On 4 September 2010 15:49, Richard Jones <rich at annexia.org> wrote:
> > It's possible, though not simple, to do this from the hypervisor. I
> > have written programs which scan the kernel for its version, look at
> > the process table and so on, and from there it's possible to scan the
> > executable pages of any process running of interest to you. I did it
> > via this libvirt API:
> May I have a copy of that program?
Sure. Be aware of the license.
Gllug mailing list - Gllug at gllug.org.uk
More information about the GLLUG