thank a lot for your efforts!, is there a place i can get memory samples to analyze(relatively new), and website to help in learning DFIR by having samples and labs.
Ahmed Elshaer Yes! Check this out: github.com/volatilityfoundation/volatility/wiki/Memory-Samples ... some are newer than others, but this is one of the best resources I know.
thank a lot for your efforts!, is there a place i can get memory samples to analyze(relatively new), and website to help in learning DFIR by having samples and labs.
Ahmed Elshaer Yes! Check this out: github.com/volatilityfoundation/volatility/wiki/Memory-Samples ... some are newer than others, but this is one of the best resources I know.
Great, Thanks
can i use redline to open and analyze a memory dump file?
Aslam H. Volatility would probably be better suited for that.