#1Tools for analyzing RAM dumps to find running processes, network connections, and hidden malware.
Kitploit recommended
nightbringer21/fridumpCross-platform memory dumper using Frida to extract accessible memory from iOS, Android, and Windows applications for forensic analysis and…
eugnis/spectre-attackExample of using revealed "Spectre" exploit (CVE-2017-5753 and CVE-2017-5715)
lethal-forensics/memprocfs-analyzerAutomates Windows memory forensics and DFIR workflows with MemProcFS: YARA/ClamAV scanning, process anomaly detection, and artifact/log extraction.
mohuihui/antispyAntiSpy is a free but powerful anti virus and rootkits toolkit.It offers you the ability with the highest privileges that can detect,analyze and…
nikaiw/vmkatzExtract Windows credentials directly from VM memory snapshots and virtual disks
k1nd0ne/volwebA centralized and enhanced memory analysis platform
cristianzsh/forensictoolsCollection of forensic tools
xre0us/multidumpMultiDump is a post-exploitation tool for dumping and extracting LSASS memory discreetly.
marcosd4h/memhunterLive hunting of code injection techniques
equifox/ksdumperDumping processes using the power of kernel space !
mgeeky/threadstackspooferThread Stack Spoofing - PoC for an advanced In-Memory evasion technique allowing to better hide injected shellcode's memory allocation from scanners…
velocidex/winpmemThe multi-platform memory acquisition tool.
nickcano/xenoscanOpen source memory scanner written in C++
sekoialab/fastir_collectorLive Windows forensic acquisition tool that collects system artefacts (registry, memory, disk, files) into CSV/JSON for early compromise detection…
fox-it/dissectDissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from…
kyleavery/aceldrCobalt Strike UDRL for memory scanner evasion.
