domains / families / security / memory-forensics-volatility

memory-forensics-volatility

separate

Memory forensics playbook using Volatility 2/3. Use when analyzing memory dumps for malware analysis, credential extraction, process investigation, code injection detection, and incident response timeline reconstruction.

When to use

• analyzing memory dumps
• malware analysis
• credential extraction
• process investigation
• code injection detection
• incident response timeline reconstruction
• hidden process detection
• network connections analysis

Skill page

Source