FeedDiscussion
Windows Memory Forensics: Finding a Live Infection with Volatility
PID 1484 had been running since boot. Nothing about that was unusual: it was Explorer.exe, the process every Windows machine on earth is running right now. What was unusual was the process hanging off
rr-cyber.hashnode.dev11 min read
#cyber#cyber-2#cybersecurity#cybersecurity-1#cybersec#cyber-security#cyber-attacks#cybersecurityawareness#cyberattack#cybercrime#digitalforensic#digital-forensics#dfir#information-security
Responses
No responses yet.