509
edits
Changes
Jump to navigation
Jump to search
mLine 141:
Line 141: − +
→Memory Forensics
==== Memory Forensics ====
==== Memory Forensics ====
The <code>checkpointctl memparse</code> command can be used to analyze the memory pages of individual processes in the container checkpoint.
The <code>checkpointctl memparse</code> command can be used to analyze the memory pages of individual processes in the container checkpoint. When used without any options, this command will display a table with an overview of the processes: their names, IDs, and memory sizes. The <code>--pid</code> option can be used to specify a process to analyze. The <code>--search</code> and <code>--search-regex</code> options can be used to search for a string or regex pattern in the memory pages.