MoVP 1.1 Logon Sessions, Processes, and Images
by Volatility | Sep 10, 2012 | forensics, kernel, movp, rdp, volatility, windows
Month of Volatility Plugins Attackers like to log on. They specifically like logging on remotely with RDP. Whenever these actions occur, the Windows kernel creates a new session, which is basically a container for processes and objects (like window stations and...Month of Volatility Plugins (MoVP)
by Volatility | Sep 7, 2012 | linux, malware, movp, volatility, windows
To kickstart this new blog and celebrate the upcoming Open Memory Forensics Workshop (OMFW) 2012 and Volatility 2.2 release, we’re announcing Month of Volatility Plugins (MoVP). Every day (M-F) for the 3 weeks leading up to OMFW 2012 and 1...Month of Volatility Plugins (MoVP)
by Volatility | Sep 7, 2012 | linux, malware, movp, volatility, windows
To kickstart this new blog and celebrate the upcoming Open Memory Forensics Workshop (OMFW) 2012 and Volatility 2.2 release, we’re announcing Month of Volatility Plugins (MoVP). Every day (M-F) for the 3 weeks leading up to OMFW 2012 and 1...
You must be logged in to post a comment.