Create your own polished presentation in minutes. Just describe what you need.
Free to try, no credit card requiredInfection
Alerts/Notifications
Live IR
Memory Acquisition
Memory Forensics
Reverse Engineering
Research
Memory Exploration
User Mode
services.exe
Development
Plugin Anatomy
Kernel Mode
WMI (wmic.exe)
services.msc
cmd.exe > sc query
winlogon.exe
explorer.exe
Process Hacker
EnumServiceStatus()
kernel32.dll
_SERVICE_RECORD
_SERVICE_RECORD
[heap]
.text
.data
.rsrc
[exe]
_SERVICE_RECORD
_SERVICE_RECORD
[stack]
_SERVICE_RECORD
_SERVICE_RECORD
PlugX: The Memory
Forensics Lifecycle
Malware Analysis
with
The Volatility Framework
@volatility
Create your own polished presentation in minutes. Just describe what you need.
Free to try, no credit card required