Ultimap - Revision history

Budabum: Undo revision 6603 by This content is not available (Talk)

2019-03-18T18:55:52Z

Undo revision 6603 by This content is not available (Talk)

This content is not available at 16:26, 16 March 2019

2019-03-16T16:26:37Z

Dark Byte at 22:13, 4 December 2018

2018-12-04T22:13:33Z

Csimbi: fixed typo

2018-11-22T12:28:23Z

fixed typo

Csimbi: Added links

2018-11-22T12:21:34Z

Added links

Csimbi: First draft

2018-11-22T12:18:31Z

First draft

New page

In contrast to normal scans where you are looking for values in the memory, CE introduced a new features called Ultimap allowing you to look for code that was executed (or not). By sieving through the results, you find functions and procedures rather than values.

Ultimap requires an Intel CPU.
For older Intel CPUs, you can use only Ultimap1, provided that your system supports DBVM.
If you have an Intel ix 6xxx or higher CPU, you can use Ultimap2, which works without DBVM.
Note: there are earlier revisions of the 6xxx CPUs out there with older revision of IPT in them - these won't support Ultimap2.

← Older revision		Revision as of 18:55, 18 March 2019
Line 1:		Line 1:
−	~~<span style="font~~-~~size:25px;color:red">Sorry! Content not available~~.~~</span>~~	+	In contrast to normal scans where you are looking for values in the memory, CE introduced a new feature called 'Ultimap' allowing you to look for code that was executed (or not). By sieving through the results, you find functions and procedures rather than values.
		+
		+	Ultimap requires an Intel CPU.
		+	For older Intel CPUs, you can use only [[Ultimap1]], provided that your system supports [[DBVM]].
		+	If you have an Intel ix 6xxx or higher CPU, you can use [[Ultimap2]], which works without [[DBVM]].
		+	Note: there are earlier revisions of the 6xxx CPUs out there with older revision of IPT (Intel Process Trace) in them - these won't support [[Ultimap2]].

← Older revision		Revision as of 16:26, 16 March 2019
Line 1:		Line 1:
−	~~In contrast to normal scans where you are looking for values in the memory, CE introduced a new feature called 'Ultimap' allowing you to look for code that was executed (or~~ not~~). By sieving through the results, you find functions and procedures rather than values.~~	+	<span style="font-size:25px;color:red">Sorry! Content not available.</span>
−
−	~~Ultimap requires an Intel CPU.~~
−	~~For older Intel CPUs, you can use only [[Ultimap1]], provided that your system supports [[DBVM]].~~
−	~~If you have an Intel ix 6xxx or higher CPU, you can use [[Ultimap2]], which works without [[DBVM]].~~
−	~~Note: there are earlier revisions of the 6xxx CPUs out there with older revision of IPT (Intel Process Trace) in them - these won't support [[Ultimap2]]~~.

@@ Line 4: / Line 4: @@
 For older Intel CPUs, you can use only [[Ultimap1]], provided that your system supports [[DBVM]].
 If you have an Intel ix 6xxx or higher CPU, you can use [[Ultimap2]], which works without [[DBVM]].
-Note: there are earlier revisions of the 6xxx CPUs out there with older revision of IPT (Identity Protection Technology) in them - these won't support [[Ultimap2]].
+Note: there are earlier revisions of the 6xxx CPUs out there with older revision of IPT (Intel Process Trace) in them - these won't support [[Ultimap2]].

← Older revision		Revision as of 12:28, 22 November 2018
Line 1:		Line 1:
−	In contrast to normal scans where you are looking for values in the memory, CE introduced a new ~~features~~ called Ultimap allowing you to look for code that was executed (or not). By sieving through the results, you find functions and procedures rather than values.	+	In contrast to normal scans where you are looking for values in the memory, CE introduced a new feature called 'Ultimap' allowing you to look for code that was executed (or not). By sieving through the results, you find functions and procedures rather than values.

	Ultimap requires an Intel CPU.		Ultimap requires an Intel CPU.

@@ Line 2: / Line 2: @@
 Ultimap requires an Intel CPU.
-For older Intel CPUs, you can use only Ultimap1, provided that your system supports DBVM.
+For older Intel CPUs, you can use only [[Ultimap1]], provided that your system supports [[DBVM]].
-If you have an Intel ix 6xxx or higher CPU, you can use Ultimap2, which works without DBVM.
+If you have an Intel ix 6xxx or higher CPU, you can use [[Ultimap2]], which works without [[DBVM]].
-Note: there are earlier revisions of the 6xxx CPUs out there with older revision of IPT in them - these won't support Ultimap2.
+Note: there are earlier revisions of the 6xxx CPUs out there with older revision of IPT (Identity Protection Technology) in them - these won't support [[Ultimap2]].