Changed command arguments for new version of winpmem

botherder · Aug 23, 2021 · a93990e · a93990e
1 parent eb3751f
commit a93990e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/acquisition/memory_windows.go b/acquisition/memory_windows.go
@@ -39,7 +39,7 @@ func (a *Acquisition) GenerateMemoryDump() error {
 		return fmt.Errorf("failed to create winpmem: %v", err)
 	}
 
-	cmdArgs := []string{"--format", "raw", "--output", a.MemoryPath}
+	cmdArgs := []string{filepath.Join(a.MemoryPath, "physmem.raw")}
 
 	err = exec.Command(winpmemPath, cmdArgs...).Run()
 	if err != nil {