
上QQ阅读APP看书,第一时间看更新
Windows memory image analysis with Volatility
The Volatility Framework is an open source collection of tools written in Python for the extraction of digital artifacts from memory images. This time, we will use the second memory image, obtained earlier with DumpIt, as a data source to show you how to use this tool set for memory forensics.