Memory Forensics

2 posts

• 2026-04-01

  Volatility Memory Analysis: Hunting .NET Malware

  Memory forensics exercise using Volatility to hunt for .NET malware, hidden processes, injected code, suspicious drivers, and Meterpreter/Mimikatz/Emotet indicators in a Windows 10 memory dump.

  DFIRMalware AnalysisMemory Forensics 7 min read
  →
• 2026-03-29

  Volatility - Hunting in Memory Lab 2

  Advanced Volatility lab focused on detecting Linux rootkits (Diamorphine and Reptile) using kernel module analysis, syscall table verification, and inline hook detection.

  DFIRMemory Forensics 3 min read
  →