Tools:Memory Analysis

From ForensicsWiki
Revision as of 13:25, 3 December 2008 by Jessek (Talk | contribs)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

The following tools can be used to conduct memory analysis

Memory Analysis Framework

  • Volatility - A complete framework for analyzing Windows XP Service Pack 2 memory images.

Browser Email Memory Tool

  • pdgmail is a python script to extract gmail artifacts from memory images. Made for images extracted with pdd, but works with any memory image.