Memory-Forensics on zeishr

mmushell

Sun, 14 Apr 2024 15:23:05 +0000

mmushell is a substantial fork of EURECOM’s memory-forensics proof of concept.

The fork added module packaging, a Nix development shell, MkDocs documentation, and cleanup around architecture/exporter boundaries. It is archived as a research and reproducibility reference.

libMMU

Mon, 11 Mar 2024 19:47:23 +0000

libMMU is a Rust crate for rebuilding virtual address spaces from memory dumps.

It is inspired by OS-agnostic MMU reconstruction techniques explored in mmushell and related memory-forensics research. The project is archived as a research implementation reference.

pyDFIRRam

Thu, 20 Jul 2023 12:57:16 +0000

pyDFIRRam is a Volatility 3-based Python library for scripted and notebook-driven memory-forensics workflows.

It focuses on making memory analysis easier to automate, compose, and reuse from Python rather than forcing every investigation through one-off command invocations.