Skip to content

FS_SysInfo

Jump to bottom
ufrisk edited this page Mar 2, 2023 · 12 revisions

The sys directory

The directory sys exists as a sub-directory to the file system root.

The directory contains directories and files displaying various system information.

The files in the sys directory are listed in the table below:

File Description
computername.txt Name of the computer
time-boot.txt Time of system boot
time-current.txt Time of system
timezone.txt TimeZone of system
unique-tag.txt MemProcFS derived ID for the current memory image
version.txt Operating system version on format: major.minor.build
version-major.txt Operating system major version
version-minor.txt Operating system minor version
version-build.txt Operating system build number

Files in the sys directory and sub-directories are read-only.

Example

The example shows the sys directory, the computer name and operating system version.

For Developers

The sys sub-directory is implemented as a built-in native C-code plugin. The plugin source is located in the file modules/m_sys.c in the vmm project.

Sponsor PCILeech and MemProcFS:

PCILeech and MemProcFS is free and open source!

I put a lot of time and energy into PCILeech and MemProcFS and related research to make this happen. Some aspects of the projects relate to hardware and I put quite some money into my projects and related research. If you think PCILeech and/or MemProcFS are awesome tools and/or if you had a use for them it's now possible to contribute by becoming a sponsor!

If you like what I've created with PCIleech and MemProcFS with regards to DMA, Memory Analysis and Memory Forensics and would like to give something back to support future development please consider becoming a sponsor at: https://github.com/sponsors/ufrisk

Thank You 💖

Overview

API

Root File System

Per-Process File System

Development

FAQ

Clone this wiki locally