Memory Analysis

Understanding Memory:

Memory forensics methodology:

  1. Identify rouge processes

  2. Analyze process objects

  3. Review network artifacts

  4. look for evidence of code injection

  5. audit drivers and rootkit detection

  6. dump suspicious processes and drivers

Last updated