mem-forensics

Analyze memory dumps for forensic investigations with fast, plugin-rich workflows.

Source

third_party_registry

Updated

2026-06-22

// securityCaution

Runs locally
Open source

Running security audit…

Credentials
Network egress
Code execution
Data access
Supply chain

// install

Copy the install command and let the AI configure it · recommended for beginners

No copy-paste install info for "mem-forensics" yet — see the docs or source repo.

// examples

Investigate a suspicious process

Prompt

Analyze this memory dump and list suspicious processes, abnormal parent-child relationships, suspicious command-line arguments, and possible code injection indicators, ranked by risk.

Expected

A forensic analysis report with suspicious processes, key evidence, and a risk-ranked summary.

Extract network connection evidence

Prompt

Inspect the memory dump for active network connections, listening ports, related processes, and suspicious remote addresses, then summarize possible exfiltration or lateral movement indicators.

Expected

A network forensics summary with connection details, mapped processes, and likely attack activity indicators.

Generate a memory forensics report

Prompt

Run a full forensic analysis on this memory dump, covering processes, modules, registry artifacts, network data, suspicious handles, and persistence clues, and produce a structured report for an incident response team.

Expected

A structured incident response report with findings, categorized evidence, and recommended next steps.