Decloaker reveals files, processes, sockets and kernel modules hidden by malware and rootkits.
Read more
Decloaker reveals files, processes, sockets and kernel modules hidden by malware and rootkits.
Read more
dz6 is a fast Vim-inspired terminal hex editor for inspecting and editing binary files with search, bookmarks, comments and header parsing.
Read more
This roundup focuses on memory tools that help with forensics. Only free and open source software is eligible for inclusion here.
Read more