fmem
Memory analyzer
A Linux kernel module designed to help analyze volatile memory without the limitations of traditional memory dumping tools.
Linux Kernel Module designed to help analyze volatile memory in the linux kernel
115 stars
7 watching
38 forks
Language: C
last commit: over 2 years agoLinked from 1 awesome list
digitalisx/awesome-memory-forensicsRelated projects:
| Repository | Description | Stars |
|---|---|---|
 halpomeranz/lmg | Tools and scripts for capturing and analyzing Linux memory | 266 |
 usualsuspect/malscan | A tool to detect and analyze malicious code in process memory by executing Python scripts on YARA matches | 12 |
 crowdstrike/supermem | A tool for processing Windows memory images to extract relevant information | 260 |
 n0fate/volafox | A memory analysis toolkit for macOS developed in Python | 166 |
 antique-team/memcad | Analyzes C code for its memory layout and dependencies | 25 |
 velocidex/winpmem | A tool for acquiring and manipulating physical memory in Windows | 708 |
 shanek2/invtero.net | Analyzes and validates physical memory from various systems to extract process information and hypervisor details | 281 |
 stcarrez/mat | A tool to analyze memory usage in programs | 7 |
 mbevilacqua/appcompatprocessor | An application compatibility data analysis tool designed to extract value beyond traditional techniques | 197 |
 evild3ad/memprocfs-analyzer | Automated tool for forensic analysis of Windows memory dumps | 555 |
 ytisf/muninn | A tool to assist in memory forensics analysis on Windows systems by automating the process of extracting and exporting relevant data from memory images. | 52 |
 zer0mem0ry/kernelreadwritememory | A proof-of-concept project demonstrating kernel-level memory manipulation on Windows NT | 274 |
 gleeda/memtriage | Analyze Windows machine RAM artifacts using Winpmem and Volatility | 218 |
 microsoft/avml | A tool that captures volatile memory images from Linux systems without prior knowledge of the target OS or kernel. | 883 |
 gdbinit/readmem | A utility to dump process memory on the screen or to a binary file. | 223 |