cd /usr/src/LiME/src
insmod ./lime-3.16.0-4-amd64.ko "path=/tmp/dump.mem format=lime"

./vol.py --profile=Linuxdebian_lmde_84x64 -f /tmp/dump.mem linux_lso
./vol.py --profile=Linuxdebian_lmde_84x64 -f /tmp/dump.mem --help

# VIRTUALBOX 
vboxmanage debugvm WINDOWS_PYTHON dumpvmcore --filename=dump_vbox
~/SECURITY_AND_NET/volatility/vol.py -f dump_vbox --profile Win7SP1x64 imagecopy -O dump_vbox.raw

~/SECURITY_AND_NET/volatility/vol.py -f dump_vbox.raw --profile Win7SP1x64 privs
~/SECURITY_AND_NET/volatility/vol.py -f dump_vbox.raw --profile Win7SP1x64 psxview
~/SECURITY_AND_NET/volatility/vol.py -f dump_vbox.raw --profile Win7SP1x64 dumpcerts --dump-dir .
~/SECURITY_AND_NET/volatility/vol.py -f dump_vbox.raw --profile Win7SP1x64 svcscan
 ~/SECURITY_AND_NET/volatility/vol.py -f dump_vbox.raw --profile Win7SP1x64 hashdump