Maxim Suhanov presented聽winmem_decompress – a聽program that tries to extract compressed memory pages from page-aligned data. Such compressed memory pages can be found in virtual memory of Windows 8.1 & 10 operating systems. Learn more about the tool here.
-
Spotting the Signs of Lateral Movement
Derek King has published another post as part of his聽“Hunting with Splunk: The Basic… -
How to Deploy Cuckoo Sandbox
Marc Rivero L贸pez presented a how-to guide that will help you to deploy聽Cuckoo Sandbox … -
DFIR SQL Query Repository
Alexis Brignoni has started a collection of聽SQL query templates for digital forensics use,…
Load More Related Articles
-
Memtriage v0.2-alpha Released
0.2-alpha version of memtriage has been released. This tool allows you to quickly query a … -
libfsapfs: Library and Tools to Access the Apple File System (APFS)
libfsapfs is a library and tools by Joachim Metz to access the Apple File System (APFS). S… -
Load More In Software
