fmem
Memory analyzer
A Linux kernel module that provides access to physical memory for analysis and dumping.
Linux Kernel Module designed to help analyze volatile memory in the linux kernel
115 stars
7 watching
37 forks
Language: C
last commit: 9 months ago
Linked from 1 awesome list
Related projects:
Repository | Description | Stars |
---|---|---|
halpomeranz/lmg | A tool for capturing and analyzing Linux memory | 264 |
usualsuspect/malscan | A tool to detect and analyze malicious code in process memory by executing Python scripts on YARA matches | 12 |
crowdstrike/supermem | A tool for processing Windows memory images to extract relevant information | 258 |
n0fate/volafox | A memory analysis toolkit for macOS developed in Python | 165 |
antique-team/memcad | Analyzes C code for its memory layout and dependencies | 25 |
velocidex/winpmem | A tool for acquiring and manipulating physical memory in Windows | 693 |
shanek2/invtero.net | Analyzes and validates physical memory from various systems to extract process information and hypervisor details | 279 |
stcarrez/mat | A tool to analyze memory usage in programs | 7 |
mbevilacqua/appcompatprocessor | An application compatibility data analysis tool designed to extract value beyond traditional techniques | 197 |
evild3ad/memprocfs-analyzer | Automated forensic analysis tool for Windows memory dumps | 540 |
ytisf/muninn | A tool to assist in memory forensics analysis on Windows systems by automating the process of extracting and exporting relevant data from memory images. | 52 |
zer0mem0ry/kernelreadwritememory | A proof-of-concept project demonstrating kernel-level memory manipulation on Windows NT | 275 |
gleeda/memtriage | Analyze Windows machine RAM artifacts using Winpmem and Volatility | 218 |
microsoft/avml | A tool that captures volatile memory images from Linux systems without prior knowledge of the target OS or kernel. | 875 |
gdbinit/readmem | A tool to dump processes memory on screen or to a binary file. | 222 |