memory-forensics - Memory Forensics Techniques and Analysis
Acquire, analyze, and extract artifacts from memory dumps for incident response and malware analysis using Volatility and related tools.
Tags
Updated: 2026-09-23Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Acquire live memory captures
- Analyze process structures
- Detect memory injection techniques
- Scan network connections
- Extract registry artifacts
- Perform YARA memory scanning
Inputs
- Memory dumps
- Symbol tables
- YARA rules
Outputs
- Process dumps
- Extracted strings files
- YARA scan results
- Timeline CSV files
Requirements
- Volatility 3 framework
- Administrative or root privileges