- Windows Forensics Cookbook
- Oleg Skulkin Scar de Courcier
- 81字
- 2021-07-02 20:57:40
Windows memory acquisition with DumpIt
DumpIt is a free memory imaging tool from Comae Memory Toolkit. It's a fusion of Win32dd and Win64dd in one executable. It's extremely easy to use: even a non-technical person can use it in emergency situations. DumpIt supports all modern Windows versions, from XP to 10, both 32 and 64-bit. Also, the tool has a very important feature: it displays the Directory Table Base and the address of the debugging data structures during the acquisition process.
推薦閱讀
- TypeScript Essentials
- 計算機圖形學編程(使用OpenGL和C++)(第2版)
- Azure IoT Development Cookbook
- PLC編程及應(yīng)用實戰(zhàn)
- 利用Python進行數(shù)據(jù)分析
- Kivy Cookbook
- 深度學習程序設(shè)計實戰(zhàn)
- 計算機常用算法與程序設(shè)計教程(第2版)
- 信息安全技術(shù)(第2版)
- 片上系統(tǒng)設(shè)計思想與源代碼分析
- 數(shù)據(jù)結(jié)構(gòu):Python語言描述
- Swift Essentials
- Processing與Arduino互動編程
- 數(shù)字圖像處理與機器視覺:Visual C++與Matlab實現(xiàn)(第2版)
- JVM G1源碼分析和調(diào)優(yōu)