Skip to content

Commit e75d4a8

Browse files
committed
Updated demo movies
1 parent fa5312b commit e75d4a8

File tree

1 file changed

+7
-1
lines changed

1 file changed

+7
-1
lines changed

README.md

+7-1
Original file line numberDiff line numberDiff line change
@@ -59,7 +59,13 @@ $ python3 vol.py -f test.mem -p etw-scan/plugins/ etwscan.etwConsumer --dump
5959

6060
## Demonstration
6161

62-
TBA
62+
### How to use ETW Scanner for Volatility3
63+
64+
[![Demonstration_part1](https://img.youtube.com/vi/l4-CqWWZOxw/0.jpg)](https://www.youtube.com/watch?v=l4-CqWWZOxw)
65+
66+
### How to recover ETW events from memory images using ETW Scanner for Volatility3
67+
68+
[![Demonstration_part2](https://img.youtube.com/vi/IxFSBWS2wkY/0.jpg)](https://www.youtube.com/watch?v=IxFSBWS2wkY)
6369

6470
## Documentation
6571

0 commit comments

Comments
 (0)