Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
- Updated
Oct 31, 2025 - C
#
memory-forensics
Here are 5 public repositories matching this topic...
Dynamic unpacker based on PE-sieve
- Updated
Sep 13, 2025 - C
Workshop: Forensic Analysis of eBPF based Linux Rootkits
- Updated
Mar 13, 2024 - C
A POC tool for dumping the memory on a running Linux system.
- Updated
Nov 9, 2025 - C
Improve this page
Add a description, image, and links to the memory-forensics topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the memory-forensics topic, visit your repo's landing page and select "manage topics."