Skip to content

Commit 944634b

Browse files
mdenzelmdenzellautarolecumberryscudette
authored
Added blog post: "Memory Analysis with Velociraptor - Part 2" (Velocidex#1152)
I could not add changes to the original pull request (Velocidex#1146). Creating a new one. We added: - background section on process injection techniques - discussion chapter with - evaluation (incl. limitations and false positives) - comparison to other tools - recommendation when to use which tool --------- Co-authored-by: mdenzel <none@none> Co-authored-by: Lautaro Lecumberry <22533437+lautarolecumberry@users.noreply.github.com> Co-authored-by: Mike Cohen <scudette@users.noreply.github.com>
1 parent 5b5d5a1 commit 944634b

8 files changed

Lines changed: 555 additions & 1 deletion

File tree

.wordlist.txt

Lines changed: 57 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1951,3 +1951,60 @@ BitLocker
19511951
LVM
19521952
guestmount
19531953
libguestfs
1954+
1955+
<url-free> content/blog/2025/2025-12-22-memory-analysis-pt2/_index.md
1956+
--------------------------------------------------------------------------------
1957+
AgentTesla
1958+
AssemblyInjection
1959+
Astaroth
1960+
Azorult
1961+
BADNEWS
1962+
BaseOfData
1963+
Calc
1964+
Donut
1965+
Dyre
1966+
FN
1967+
FP
1968+
Gh
1969+
GuLoader
1970+
Hollowshunter
1971+
HopLight
1972+
HyperBro
1973+
ISMAgent
1974+
Malfind
1975+
MemProcFS
1976+
Num
1977+
REvil
1978+
RokRAT
1979+
Ryuk
1980+
Spotify
1981+
TP
1982+
TsCookie
1983+
VLC
1984+
WarzoneRAT
1985+
WhisperGate
1986+
Wolovick
1987+
WordPad
1988+
bandook
1989+
fileless
1990+
frac
1991+
linkers
1992+
lokibot
1993+
netwire
1994+
ppid
1995+
qakbot
1996+
remcos
1997+
shinject
1998+
smokeloader
1999+
stRAT
2000+
synack
2001+
ursnif
2002+
xrick
2003+
VDSO
2004+
doppelgänging
2005+
ptrace
2006+
APC
2007+
ListPlanting
2008+
PoC
2009+
se
2010+
unmapping
493 KB
Loading
563 KB
Loading

0 commit comments

Comments
 (0)