Windows Memory Forensics Tools [update]
SANS recently published a good summary of Windows memory forensics acquisition and analysis tools. It’s a good compilation of must have tools for the right occasion.
[update] new url [/update]
geschonneck.com
This is the private security page of Alexander Geschonneck (Berlin, Germany).
-
© 2003-2012 Alexander Geschonneck.
Feel free to contact
me for comments. - Auf meinem Workshop zu forensischen Datenanalysen auf dem "Deutschen Datenschutzkongress 2012" in Berlin #privacy #yam
- RT @ChadChoron: iPhone Forensics – Analysis of iOS 5 backups : Part 1 http://t.co/5ImGrnNj
- RT @HTCIA: Pwning a Spammer's Keylogger #infosec #cybersec #cyber #dfir #malware... http://t.co/ArSVsihP
- PayPal no longer the most phished brand http://t.co/PXmMCnUK #yam
- RT @heisec: CISPA: US-Repräsentantenhaus stimmt für Cybersecurity-Gesetz http://t.co/X98hfYIN
January 30th, 2009 at 07:47
I want to get SANS tool.
April 21st, 2010 at 18:31
great post, i’m glad that there are tools specifically for windows.
November 7th, 2011 at 18:17
Too bad the site is unfortunately no longer available.
November 7th, 2011 at 21:54
the SANS forensics blog just moved to http://computer-forensics.sans.org/blog/2008/12/13/windows-physical-memory-finding-the-right-tool-for-the-job