Tools:Memory Analysis

From ForensicsWiki
Revision as of 22:58, 9 November 2015 by Smacaulay (Talk | contribs) (Added)

Jump to: navigation, search

The following tools can be used to conduct memory analysis.

Memory Analysis Frameworks

Browser Email Memory Tool

  • pdgmail is a python script to extract gmail artifacts from memory images. Made for images extracted with pdd, but works with any memory image.

Instant Messenger Memory Tool

Platform Independent Tools

A list of tools which should work regardless of future incremental OS / hardware updates.

  • inVtero.net Open Source Hypervisor/Process/Kernel detection for Windows, FreeBSD, OpenBSD and NetBSD. inVtero.net is based on interpreting low-level hardware defined constructs which change little over time. See github for details.