Expand description
VMware .vmss/.vmsn state file format provider.
Parses VMware suspension (.vmss) and snapshot (.vmsn) state files.
These files use a group/tag binary structure containing memory regions
and CPU state (CR3). Supports four VMware magic values:
0xBED2BED0, 0xBAD1BAD1, 0xBED2BED2, 0xBED3BED3.
Structsยง
- Vmware
Plugin - FormatPlugin implementation for VMware state files.
- Vmware
State Provider - Provider that exposes physical memory from a VMware state file.