PTfinder version 0.2.00 released

Today I presented my paper about Microsoft Windows memory analysis at the 13th DFN-Workshop. I mainly talked about the search algorithm for processes and threads I described earlier in this blog. I'm excited to release a proof of concept implementation in Perl to the public: you're welcome to download it now!

Archives

Imprint

This blog is a project of:
Andreas Schuster
Im Äuelchen 45
D-53177 Bonn
impressum@forensikblog.de

Copyright © 2005-2012 by
Andreas Schuster
All rights reserved.
Powered by Movable Type 5.12