---
title: "Discussion on \"Finding an Attacker in a Snapshot of Memory: RAM Forensics with Redline and Volatility\" | Hashnode"
description: "Discussion on \"Finding an Attacker in a Snapshot of Memory: RAM Forensics with Redline and Volatility\". Every disk-based forensic technique I'd worked through earlier in this series shared one limitation: a disk image only shows what was written to storage. A sophisticated attack often doesn't look like"
url: "https://hashnode.com/posts/finding-an-attacker-in-a-snapshot-of-memory-ram-forensics-with-redline-and-volatility/6aef90ccdff734e975acfa21"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Finding an Attacker in a Snapshot of Memory: RAM Forensics with Redline and Volatility](https://muhakeem.hashnode.dev/finding-an-attacker-in-a-snapshot-of-memory-ram-forensics-with-redline-and-volatility?utm_source=hashnode&utm_medium=feed)

Every disk-based forensic technique I'd worked through earlier in this series shared one limitation: a disk image only shows what was written to storage. A sophisticated attack often doesn't look like

4d ago · 9 min read · muhakeem.hashnode.dev  
Read the article

## Written by

[Muhammed Abdulakeem Akinpelumi](https://hashnode.com/@muhakeem)

@muhakeem

  
[View profile](https://hashnode.com/@muhakeem)

Front-End Developer | Technical Writer| WordPress Expert

## Responses

Markdown supported · ⌘↵ to post

No responses yet.