Is it possible to use ReadProcessMemory or some other form of it maybe via a library to read memory from a virtual machine running inside Hyper-V?

The host is running Windows 11 the Guest is running Windows 10 through Hyper-V

  • 1
    Hi and welcome to RE.SE. In all likelihood the answer is no. But I'd love to see an answer to this one. However, I think even from kernel mode this one may be tough. I don't think from usermode (e.g. with ReadProcessMemory) you even stand a chance.
    – 0xC0000022L
    Commented Dec 18, 2021 at 22:11


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.