memory-forensics - Memory Forensics Techniques and Analysis
Acquire, analyze, and extract artifacts from RAM captures using Volatility and related tools for incident response and malware analysis.
Tags
Updated: 2026-09-24Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Acquire live system memory
- Dump virtual machine memory
- Analyze process and network artifacts
- Detect memory injection and rootkits
- Extract registry and file artifacts
- Run YARA and string analysis
Inputs
- Memory dump captures
- YARA rule files
- Volatility symbol tables
Outputs
- Process and network analysis logs
- Dumped executable and memory files
- Extracted string text files
- Timeline CSV files
Requirements
- Administrator or root privileges
- Volatility 3 Python framework
- CLI utilities strings and grep