Skip to content

Memory Explorer is an experimental forensics tool which allows you to examine Windows Memory Images and on a good day when the driver is being friendly, on the live system as well.

License

redteamcaliber/Memory-Explorer

 
 

Repository files navigation

Memory-Explorer

Memory Explorer is an experimental forensics tool to look at Windows Memory. It can work on a raw memory image, such as a .vmem file from a VMware virtual machine. It can also work on a live system using a device driver to access the memory.

Did I say it's experimental!

Oh and it also allows me to start to use WPF, which is something I've dabbled with for a while.

Oh2 and it also allows me to start to try out MVVM, which is something else I've dabbled with.

About

Memory Explorer is an experimental forensics tool which allows you to examine Windows Memory Images and on a good day when the driver is being friendly, on the live system as well.

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • C# 98.9%
  • Other 1.1%