Skip to main content

Thanatology Exhume Blog GitHub Discord

All posts

2023

📦 Volatility3 : Import Address Table
📦 Volatility3 : Alternate Data Stream Scan
📘 Volatility3: Modern Windows Hibernation file analysis
📘 Volatility3 - Remote analysis on cloud object-storage.
🔦 Video Games Forensics - Steam
📦 Volatility3 Windows Plugin - KeePass
Title
🔦 Debunking the Expert Witness Compression Format (EWF)
🧬 Malware Analysis with VISION-ProcMon

2022

📦 Volatility3 Windows Plugin - AnyDesk
📦 Volatility3 Linux Plugin - Inodes
📦 Volatility3 Windows Plugin - Prefetch
🖋 Cyberdefenders - Writeup - Brave
📘 Using Volatility3 as a library
📄 Volatility3 - ISF for MacOs

Title

May 11, 2023 · One min read

Digital Forensics Spiderman

Tags:

DFIR
Memory Forensics
Anydesk
Windows

📦 Volatility3 Windows Plugin - KeePass

🔦 Debunking the Expert Witness Compression Format (EWF)

Copyright © 2025 Forensicxlab