Can volatility use swap file when a page fault occurs?

[yarona1993]

/framework/automagic/pdbscan.py - determine_valid_kernel func could fail and raise a PagedInvalidAddressException
It possible to complete the missing pages from the pagefile.sys from the machine itself
Possible use: vol.py -f /tmp/win2019.dmp -pf /tmp/pagefile.sys

[ikelos]

Hi, I think you're asking about using swapfiles when they're available. This is already support in the library, and exposed through the CLI as --single-swap-locations and you must provide a list of the swap files in the order windows expects them (there can be up to 15 swap files). They must also be provided as valid URIs (so file:///path/to/pagefile.sys). Please let me know if this resolves your question so we know whether to mark this as resolved...

[paulkermann]

@yarona1993 have a look at #778 if it does not work for you