- Windows Forensics Cookbook
- Oleg Skulkin Scar de Courcier
- 81字
- 2021-07-02 20:57:40
Windows memory acquisition with DumpIt
DumpIt is a free memory imaging tool from Comae Memory Toolkit. It's a fusion of Win32dd and Win64dd in one executable. It's extremely easy to use: even a non-technical person can use it in emergency situations. DumpIt supports all modern Windows versions, from XP to 10, both 32 and 64-bit. Also, the tool has a very important feature: it displays the Directory Table Base and the address of the debugging data structures during the acquisition process.
推薦閱讀
- HTML5+CSS3基礎開發教程(第2版)
- 機械工程師Python編程:入門、實戰與進階
- 網絡爬蟲原理與實踐:基于C#語言
- PostgreSQL Replication(Second Edition)
- Learning DHTMLX Suite UI
- Webpack實戰:入門、進階與調優(第2版)
- Hadoop 2.X HDFS源碼剖析
- Backbone.js Testing
- Go語言入門經典
- 零基礎學C++(升級版)
- 大話代碼架構:項目實戰版
- Mastering ASP.NET Web API
- Elastix Unified Communications Server Cookbook
- Learning ROS for Robotics Programming
- Scala實用指南