Skip to content

FS_SysInfo_Certificates

Jump to bottom
ufrisk edited this page Mar 2, 2023 · 4 revisions

The sys/certificates directory

The directory sys/certificates exists as a sub-directory to the file system root.

The directory contains process related information in a convenient tree format.

The files in the sys/certificates directory are listed in the table below:

File Description
certificates/certificates.txt certificate information for all located certificates.
certificates/[user]/*.cer certificate files.

Files in the sys/certificates directory are read-only.

The directory exists only on Windows. Linux support is planned for the future.

Example

The example shows the Local Machine certificate store inside the sys/cert directory, a certificate and the file certificates.txt which contain a summary of all certificates successfully enumerated.

For Developers

The sys/certificates sub-directory is implemented as a built-in native C-code plugin. The plugin source is located in the file modules/m_sys_cert.c in the vmm project.

Sponsor PCILeech and MemProcFS:

PCILeech and MemProcFS is free and open source!

I put a lot of time and energy into PCILeech and MemProcFS and related research to make this happen. Some aspects of the projects relate to hardware and I put quite some money into my projects and related research. If you think PCILeech and/or MemProcFS are awesome tools and/or if you had a use for them it's now possible to contribute by becoming a sponsor!

If you like what I've created with PCIleech and MemProcFS with regards to DMA, Memory Analysis and Memory Forensics and would like to give something back to support future development please consider becoming a sponsor at: https://github.com/sponsors/ufrisk

Thank You 💖

Overview

API

Root File System

Per-Process File System

Development

FAQ

Clone this wiki locally