Teaching MemProcFS to Read Linux Memory

Teaching MemProcFS to Read Linux Memory

For years, [MemProcFS](https://github.com/ufrisk/memprocfs) has had one of the nicest workflows in memory forensics: point it at a memory image and it mounts the thing as a filesystem you can `cd` into, `cat`, and `grep` like a live machine. No query language to...

Share This

Share this post with your friends!