Mastering Machine Learning for Penetration Testing

Memory malware analysis

Years ago, using the two previous techniques was enough to analyze malware, but attackers are now using new, more complicated techniques to avoid detection. I bet that you have heard about fileless malware. Memory malware analysis is needed to detect the new wave of malware. Memory malware analysis occurs by analyzing memory dumps collected from infected machines. In order to perform memory analysis, the analyst first needs to acquire memory (dumping memory), and can analyze it later by using many utilities and techniques.

One of the most used frameworks is the volatility framework. If you have installed a Kali Linux distribution, you can use volatility directly on your machine without installing it. The following ...