python /root/volatility-master/vol.py --file="neicun.vmem" imageinfo

python /root/volatility-master/vol.py --file="neicun.vmem" --profile=Win7SP1x64 pslist

python /root/volatility-master/vol.py --file="neicun.vmem" --profile=Win7SP1x64 envars

python /root/volatility-master/vol.py --file="neicun.vmem" --profile=Win7SP1x64 cmdscan

python /root/volatility-master/vol.py --file="neicun.vmem" --profile=Win7SP1x64 consoles

python /root/volatility-master/vol.py --file="neicun.vmem" --profile=Win7SP1x64 cmdline

python /root/volatility-master/vol.py --file="neicun.vmem" --profile=Win7SP1x64 psscan

python /root/volatility-master/vol.py --file="neicun.vmem" --profile=Win7SP1x64 filescan

python /root/volatility-master/vol.py --file="neicun.vmem" --profile=Win7SP1x64 hashdump