From bc50301d82cd328f08ed4d24872e374e803595fd Mon Sep 17 00:00:00 2001 From: Herman Slatman Date: Thu, 26 Nov 2015 09:32:04 +0100 Subject: [PATCH 1/2] Memoryze added --- README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/README.md b/README.md index b699f77..2029975 100644 --- a/README.md +++ b/README.md @@ -32,6 +32,8 @@ A curated list of tools and resources for security incident response, aimed to h * [Responder PRO](http://www.countertack.com/responder-pro) - Responder PRO is the industry standard physical memory and automated malware analysis solution * [KnTList](http://www.gmgsystemsinc.com/knttools/) - Computer memory analysis tools * [Rekall](http://www.rekall-forensic.com/) - Open source tool (and library) for the extraction of digital artifacts from volatile memory (RAM) samples +* [Memoryze](https://www.fireeye.com/services/freeware/memoryze.html) - Memoryze by Mandiant is a free memory forensic software that helps incident responders find evil in live memory. Memoryze can acquire and/or analyze memory images, and on live systems, can include the paging file in its analysis. + ### Memory Imaging Tools * [OSForensics](http://www.osforensics.com/) - OSForensics can acquire live memory on 32bit and 64bit systems. A dump of an individual process’s memory space or physical memory dump can be done From d7df2064ace42ee9e924222cc0ab62323c873bf6 Mon Sep 17 00:00:00 2001 From: Herman Slatman Date: Thu, 26 Nov 2015 09:32:30 +0100 Subject: [PATCH 2/2] Memoryze for Mac --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 2029975..e731fbc 100644 --- a/README.md +++ b/README.md @@ -33,6 +33,7 @@ A curated list of tools and resources for security incident response, aimed to h * [KnTList](http://www.gmgsystemsinc.com/knttools/) - Computer memory analysis tools * [Rekall](http://www.rekall-forensic.com/) - Open source tool (and library) for the extraction of digital artifacts from volatile memory (RAM) samples * [Memoryze](https://www.fireeye.com/services/freeware/memoryze.html) - Memoryze by Mandiant is a free memory forensic software that helps incident responders find evil in live memory. Memoryze can acquire and/or analyze memory images, and on live systems, can include the paging file in its analysis. +* [Memoryze for Mac](https://www.fireeye.com/services/freeware/memoryze-for-the-mac.html) - Memoryze for Mac is Memoryze but then for Macs. A lower number of features, however. ### Memory Imaging Tools