🧠 Dumplyzer | Memory Dump Analysis Platform
With Dumplyzer, you can analyze Memory Dump files quickly and easily through a GUI, without having to work with multiple separate tools.
🎯 Some of its key features include:
- Extract Process data, Command Lines, Modules/DLLs, Handles, and Process Trees
- Investigate detailed Process information by PID, including Parent/Child processes, Modules, Network connections, Handles, and Memory Regions
- Extract IOCs including IPs, Domains, URLs, Mutexes, Registry Keys, Paths, and Hashes
- Extract and investigate Network Connections and Network Artifacts
- Reconstruct PCAP files
- Create Timelines from extracted Artifacts and filter them by time range
- Index and quickly search through extracted Artifacts
- Reconstruct PE files
- Three analysis modes: Quick Triage, Complete Analysis, and Custom
- YARA scanning with support for custom Rules
- Analyze the capabilities of reconstructed PE files
- Carve Artifacts including Emails, Phone Numbers, MAC Addresses, HTTP Logs, AES Keys, and similar data
- Automatically identify and deobfuscate Strings
- Run Volatility Plugins with a simple and intuitive interface
- Correlate extracted Artifacts
- Generate reports in HTML, JSON, and Excel formats
- Fully Offline and Local
📦 The Windows Installer is available through the repository below, and you can also build the project from source if needed.
🔗 GitHub:
https://github.com/EmadAbedini/Dumplyzer
If you work in DFIR, Threat Hunting, Malware Analysis, or Memory Forensics, Dumplyzer can help make the Memory Dump analysis process significantly faster and easier.
Hope you find it useful ❤️
Post #346
2.17K
- ❤ 6
- 😱 3
- 😍 2
- 👍 1