Skip to main content

All Questions

Filter by
Sorted by
Tagged with
3 votes
2 answers
7k views

Volatility - manually inspect heap of a process

According to the book The Art of Memory Forensics[1], there is a heaps plugin that can extract out information from the heap memory of a process. I'm using latest version of volatility - 2.6 , but the ...
Sohel Ahmed's user avatar
2 votes
1 answer
75 views

Capture and Replay

I was wondering if it was possible to create a python script that is able to capture and replay the instructions executed by a windows program for in depth analysis.
jjprince's user avatar