extr-memo-artf-reka

star 4

Uses Rekall memory forensics framework to analyze memory dumps for process hollowing, injected code via VAD anomalies, hidden processes, and rootkit detection. Applies plugins like pslist, psscan, vadinfo, malfind, and dlllist to extract forensic artifacts from Windows memory images. Use during incident response memory analysis.

By Undermybelt schedule Updated 6/7/2026

play_arrow Run Skill in Manus View GitHub

Skill instructions (SKILL.md) could not be loaded from local cache or raw GitHub repository.

Install via CLI

npx skills add https://github.com/Undermybelt/hermes-skills --skill extr-memo-artf-reka

Repository Details

star Stars 4

call_split Forks 1

navigation Branch main

article Path SKILL.md