CTF Support
Toggle Dark/Light/Auto mode Toggle Dark/Light/Auto mode Toggle Dark/Light/Auto mode Back to homepage
  1. CTF Support
  2. /
  3. Forensics
  4. /
  5. Memory Analysis
Edit page

Memory Analysis

Memory dumps

To analyze memory dumps, Volatility2 or Volatility3 can be used.

Volatility 2

Image Identification

To identify and get a memory profile for a memory dump using Volatility 2, run volatility -f <memdump> imageinfo.