Image Info: We often use imageinfo to identify the profile(s) of a forensic memory image but you can also get the information about the image date and time in UTC.
Once you've identified the right profile; in this case it's Win2008R2SP1x64. You can choose to set it as an environment variable:
You can use unset command to remove it too:
Comments are closed.