Releases: 504ensicsLabs/LiME
Bug Fix and new kernel options
Kernel Compression Option
Thanks to the great hard work of @valldrac, an option to compress memory using the zlib library from the kernel has been added.
Compression can significantly reduce the time required to acquire a memory capture. It can achieve the speedup of 4x over uncompressed transfers with a few memory overhead (~ 24 KB).
To enable add "compress=1" to your insmod parameters.
To decompress it you can use pigz or any zlib-compatible library.
See the README for more details.
This release also includes refactoring and cleaning.
Fixes for digest transfer
This release fixes issues for transferring a calculated digest over a
TCP socket. The module will now retry 10x when it fails to bind a socket.
The Makefile also provides an option to build a module without stripping
symbols
Memory Hashing
LiME v1.8 contains a minor bug fix and the ability to calculate and generate a hash digest of acquired memory.
Thanks to Daryl Bennett (@kd8bny) for the hard work in this area!
Fixes for kernels >= 4.11
documentation of the timeout parameter (Fixes #27) * documentation of the timeout parameter * Update README