We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent fa5312b commit e75d4a8Copy full SHA for e75d4a8
README.md
@@ -59,7 +59,13 @@ $ python3 vol.py -f test.mem -p etw-scan/plugins/ etwscan.etwConsumer --dump
59
60
## Demonstration
61
62
-TBA
+### How to use ETW Scanner for Volatility3
63
+
64
+[](https://www.youtube.com/watch?v=l4-CqWWZOxw)
65
66
+### How to recover ETW events from memory images using ETW Scanner for Volatility3
67
68
+[](https://www.youtube.com/watch?v=IxFSBWS2wkY)
69
70
## Documentation
71
0 commit comments