The pslist plugin also performs the same type of analysis as Volatility. This includes the process name, process ID, and parent process ID.

Get Digital Forensics and Incident Response now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.