MemProcFS Analyzer Files

Automated Forensic Analysis of Windows Memory Dumps for DFIR

This is an exact mirror of the MemProcFS Analyzer project, hosted at https://github.com/LETHAL-FORENSICS/MemProcFS-Analyzer. SourceForge is not affiliated with MemProcFS Analyzer. For more information, see the SourceForge Open Source Mirror Directory.

The interactive file manager requires Javascript. Please enable it or use sftp or scp.
You may still browse the files here.

Name	Modified	Size	InfoDownloads / Week
Parent folder
MemProcFS-Analyzer-v1.1.0.zip	2024-09-03	780.6 kB	0
MemProcFS-Analyzer v1.1.0 source code.tar.gz	2024-09-03	4.3 MB	0
MemProcFS-Analyzer v1.1.0 source code.zip	2024-09-03	4.3 MB	0
README.md	2024-09-03	296 Bytes	0
Totals: 4 Items		9.3 MB	0

Added: Updater.ps1 Added: FS_Sys_Sysinfo Added: FS_Forensic_Prefetch Added: 376 YARA Custom Rules Added: Offline Mode Added: MemProcFS.log Added: Microsoft Protection Logs (MPLogs) Added: ProcessesAndModules-Extended_Info.ps1 (Collect-MemoryDump) Fixed: Other minor fixes and improvements

Source: README.md, updated 2024-09-03

You Might Also Like

Gen AI apps are built with MongoDB Atlas

Build gen AI apps with an all-in-one modern database: MongoDB Atlas

MongoDB Atlas provides built-in vector search and a flexible document model so developers can build, scale, and run gen AI apps without stitching together multiple databases. From LLM integration to semantic search, Atlas simplifies your AI architecture—and it’s free to get started.

Start Free

MongoDB Atlas runs apps anywhere

Deploy in 115+ regions with the modern database for every enterprise.

MongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.

Start Free

Recommended Projects

YARA
YARA is a tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families (or whatever you want to describe) based on textual or binary patterns. Each description, a.k.a rule, consists of a set of...
Volatility
Volatility is a widely used open-source framework for analyzing memory captures (RAM dumps) from Windows, Linux, and macOS systems. It enables investigators and malware analysts to extract process lists, network connections, DLLs, strings, artifacts, and more. Volatility supports many plugins...
GRR
GRR Rapid Response is an incident response framework focused on remote live forensics. It consists of a python client (agent) that is installed on target systems, and python server infrastructure that can manage and talk to clients. The goal of GRR is to support forensics and investigations in a...
FTimes
FTimes is a forensic system baselining, searching, and evidence collection tool. Its primary purpose is to gather and/or develop topographical information and attributes about specified directories and files in a manner conducive to intrusion and forensic analysis.
DeepBlueCLI
DeepBlueCLI is a PowerShell-centric threat-hunting toolkit built to extract, normalize, and flag suspicious activity from Windows event logs and Sysmon telemetry. It parses common sources—including Windows Security, System, Application, PowerShell logs, and Sysmon event ID 1—then applies a rich...

MemProcFS Analyzer Files

Automated Forensic Analysis of Windows Memory Dumps for DFIR

Get an email when there's a new version of MemProcFS Analyzer