8 Memory Analysis

INFORMATION IN THIS CHAPTER:

Creating a Volatility profile

Getting process information

Process maps and dumps

Getting bash histories

Using Volatility check plugins

Getting network information

Getting filesystem information from memory