Andreas has posted a couple of new Volatility plugins recently that look really interesting, in that he provided the capability to link file objects to processes, as well as scanning a memory dump for driver objects.
New Volatility Plugins
Reviewed by 0x000216
on
Tuesday, April 14, 2009
Rating: 5