基于Memprocfs和Volatility的可视化内存取证工具
-
Updated
Aug 10, 2026 - TypeScript
#
memprocfs
Here are 15 public repositories matching this topic...
MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR
-
Updated
May 2, 2026 - PowerShell
First open-source DMA-based HWID spoofer written in Rust. Spoof hardware IDs via direct memory access.
rust reverse-engineering cybersecurity anti-cheat smbios dma pcie memory-forensics kernel-bypass security-research hwid windows-security hardware-id hwid-spoofer memprocfs hardware-spoofing patchguard-bypass dse-bypass
-
Updated
Mar 26, 2026 - Rust
DMA-based memory analysis framework
-
Updated
Mar 22, 2026 - C++
Lightweight C++ library for external mouse control via DMA. Simple API, no configuration needed. For game development, automation, and research.
windows automation fpga hardware game-development cpp-library dma memory-manipulation input-injection mouse-control memprocfs pcileech direct-memory-access cheat-development external-input
-
Updated
Dec 21, 2025 - C++
DMA-based DLL injector using MemProcFS/Hyper-V to map and execute payloads inside a guest VM process entirely from the host — no guest kernel interaction.
-
Updated
Mar 13, 2026 - C++
A tool for converting Windows PDB files used by MemProcfs to Volatility3 symbol files (.json.xz).
-
Updated
Nov 29, 2024 - Python
DMA Lab - Hardware-level anti-cheat research, firmware configs, FPGA guides and PCILeech resources
fpga hardware reverse-engineering game-hacking anti-cheat dma memory-forensics memprocfs pcileech kernel-security leechcore
-
Updated
May 8, 2026 - Python
AI-assisted digital forensics lab — 12 tools, 3 runtimes, cross-source correlation, one-command automation
automation correlation incident-response cross-validation forensics dfir digital-forensics forensic-analysis memory-forensics volatility3 memprocfs sift-workstation hermes-agent
-
Updated
Jul 21, 2026 - HTML
Modern C++17 wrapper for MemProcFS/VMMDLL with structured DMA memory APIs, process introspection, scanning, input support, and hardware-free tests.
-
Updated
Aug 19, 2026 - C++
Blue Team memory forensics investigation using Volatility 3 and MemProcFS to analyze suspicious processes, injected memory, PE modifications, network artifacts, and IOCs through evidence-driven forensic analysis.
incident-response dfir threat-hunting malware-analysis digital-forensics memory-forensics blue-team process-injection digital-forensics-incident-response volatility3 windows-forensics memprocfs soc-analyst
-
Updated
Aug 11, 2026
Live physical memory acquisition for Windows with byte-accurate error isolation, live kernel hints, and zero vendor lock-in.
-
Updated
Aug 23, 2026 - C++
Improve this page
Add a description, image, and links to the memprocfs topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the memprocfs topic, visit your repo's landing page and select "manage topics."