Post Thu May 01, 2014 10:32 pm

Memory Analysis with DumpIt and Volatility

Gooood Mornin'. In this episode, memory analysis 101, MoonSol's Dumpit (to create a forensic image of memory) and Volatility (to rip apart the image) is covered. There are many reasons to carve out memory... Retrieving malware, evidence from "safe browsing", grabbing crypto keys and other sensitive information are just a few things that can be done when analyzing memory.