Hi
I managed to capture the memory using FTK imager and the file is memdump.mem.
I autopsy, I have activated the experimental mode and also installed the python plugin for volatility and also the voltalityprocessor.zip file.
Still, the result of the analysis is showing error in volatility-related plugins
what could be the reason?
I don’t know anything about the python plug-in, but I might be able to help with the data source processor (Autopsy User Documentation: Volatility Data Source Processor). Can you copy in some of the errors? (To get to the logs, see Autopsy User Documentation: Troubleshooting). Have you tried just running Volatility on your image outside of Autopsy?