Skip to content

FS_SysInfo_Certificates

Jump to bottom
ufrisk edited this page Aug 3, 2020 · 4 revisions

The sysinfo/certificates directory

The directory sysinfo/certificates exists as a sub-directory to the file system root.

The directory contains process related information in a convenient tree format.

The files in the sysinfo/certificates directory are listed in the table below:

File Description
certificates/certificates.txt certificate information for all located certificates.
certificates/[user]/*.cer certificate files.

Files in the sysinfo/certificates directory are read-only.

Example

The example shows the Local Machine certificate store inside the sysinfo/cert directory, a certificate and the file certificates.txt which contain a summary of all certificates successfully enumerated.

For Developers

The sysinfo/certificates sub-directory is implemented as a built-in native C-code plugin. The plugin source is located in the file m_sysinfo_cert.c in the vmm project.

Sponsor PCILeech and MemProcFS:

PCILeech and MemProcFS is free and open source!

I put a lot of time and energy into PCILeech and MemProcFS and related research to make this happen. Some aspects of the projects relate to hardware and I put quite some money into my projects and related research. If you think PCILeech and/or MemProcFS are awesome tools and/or if you had a use for them it's now possible to contribute by becoming a sponsor!

If you like what I've created with PCIleech and MemProcFS with regards to DMA, Memory Analysis and Memory Forensics and would like to give something back to support future development please consider becoming a sponsor at: https://github.com/sponsors/ufrisk

Thank You 💖

Overview

API

Root File System

Per-Process File System

Development

FAQ

Clone this wiki locally