evild3ad / MemProcFS-Analyzer

MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR

Home Page:https://lethal-forensics.com

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Not executing

archanchoudhury opened this issue · comments

Hi There,
Thanks a lot for creating such an awesome tool. While running, it is throwing below error-

[Error] github.com is NOT reachable. Please check your network connection and try again.

My internet connection is working fine. Could you please let me know how to resolve this issue?
image

Hi, it seems that github.com is not reachable. Are you using VPN or a proxy?

You can possibly uncomment line 471...the "Exit" command (and also line 479 for f001.backblazeb2.com).

No I am not using any VPN or proxy. I have removed the check from the script and it is running now. I believe, it is due to PingException at the github end. Probably you can give a test to google.com to see if the machine has internet connection or not.

image

image

Interesting...on my side it is always working.

github com

Which PowerShell version are you using?

Is this command working on your side?

if ((Test-NetConnection -ComputerName github.com -Port 443).TcpTestSucceeded) { Write-Output "True" }

I am using below:

image

Yes, above command works for me. Looks like we have to force 443

Will be fixed with the next version. Thanks for reporting!

Also one more thing.. I noticed the script is exited on a Dokan Check at the very beginning even before selecting the memory image. So, you might wanna tweak the logic to install the dependencies first and then put the option to select the image file. I have installed the Dokan explicitly on first run.

It is mentioned under Prerequisites, that you have to manually install Dokany first. Dokany needs most of the time a reboot of the system, that's the reason why it is not auto-installed and auto-updated. This simple check is only to make the script more robust.

I am already working on v0.7 and in parallel I will add more info to the Wiki.

A helpful introduction video is planned...but it will take some time I think. ;-)

Thanks again!