dump RAM from El Capitan
How can I acquire the RAM in raw form with El Capitan installed?
Thank you
MacBook Air, Mac OS X (10.7.5)
How can I acquire the RAM in raw form with El Capitan installed?
Thank you
MacBook Air, Mac OS X (10.7.5)
You can temporarely disable SIP and try OSXPmem again. it will very probably run, as Dialabrain suggests.
However I don't think the result will be a true result, but if that is not important (because it is the method of analysing that counts probably), why not try it.
Disabling/enabling SIP is easy and done in the RecoveryPartition.
I strongly suggest to re-enable SIP a soon as possible after your test.
Lex
dialabrain: if the app "works" it is almost certain that the result is not true, but it may not be important as i said before.
Lexiepex wrote:
You can temporarely disable SIP and try OSXPmem again. it will very probably run, as Dialabrain suggests.
FWIW, I never said or implied "it will very probably run.". I actually said it still may not run. There's every chance it needs to be recompiled against the El Capitan kernel.
As I said already; no need for downgrading.
Virtualisation would not change the Ram handling of the (main) OSX.
dump RAM from El Capitan