Hi,
Anybody please help me on this dump-guest-memory command? How does the virtual memory map to the dumped file?
For example, if x86 register RIP points to 0x12345, how does that map to the dump file? Meaning how can I find where this address 0x12345 in the dump?
I tried, but couldnt find much documentation on this command.
Thank you a lot,
Jun