RAM ENSCRIPT UPDATED!!! Download
The new RAM Enscript contains:
OS Identification
Processes (Exited / Running)
Registry Remnants (UserAssist)
MSHTML Remnants
MFT Parser.
Runs against RAM Dumps from Windows 2000 to Vista.
Many Thanks to the First RAM Analysis Advance Class at IACIS- Thanks for the Hard Work.
No comments:
Post a Comment