My blog post Building a Linux profile for Volatility 2 and 3:
https://forensenellanebbia.blogspot.com/2021/02/building-profile-for-volatility-2-and-3.html
Copy the profile files to:
- Volatility 2: ~/volatility/volatility/plugins/overlays/linux/
- Volatility 3: ~/volatility3/volatility3/symbols/linux/
Red Hat Enterprise Linux (RHEL)
- /pub/redhat/linux/enterprise: http://ftp.redhat.com/pub/redhat/linux/enterprise/
- Download Red Hat Enterprise Linux: https://access.redhat.com/downloads
- Red Hat Packages: https://access.redhat.com/downloads/content/package-browser
- Activation Keys: https://console.redhat.com/settings/connector/activation-keys
- How to register a system to Red Hat Subscription Management using an activation key?: https://access.redhat.com/solutions/3341191
- How do I install a specific kernel version?: https://access.redhat.com/solutions/134403
- How can I download or install kernel debuginfo packages for RHEL systems?: https://access.redhat.com/solutions/9907
Register your installation to install packages from redhat repo:
subscription-manager register --org=ORG ID --activationkey=Key Name
Install these packages:
dnf install gcc make elfutils-libelf-devel
CentOS
Fedora
SUSE Linux Enterprise Server (SLE)
- Download trial ISO: https://www.suse.com/download/sles/
- Request trial code: https://scc.suse.com/products/2140
libdwarf/dwarfdump