300-215 · Question #112
Which tool conducts memory analysis?
The correct answer is C. Volatility. Volatility is an open-source memory forensics tool specifically designed for memory analysis. It allows forensic investigators to inspect memory dumps for running processes, hidden processes, injected code, and malicious activity in memory. Volatility helps security…
Question
Which tool conducts memory analysis?
Options
- AMemDump
- BSysinternals Autoruns
- CVolatility
- DMemoryze
How the community answered
(25 responses)- A4% (1)
- B4% (1)
- C92% (23)
Explanation
Volatility is an open-source memory forensics tool specifically designed for memory analysis. It allows forensic investigators to inspect memory dumps for running processes, hidden processes, injected code, and malicious activity in memory. Volatility helps security professionals with both incident response and malware analysis. It can identify processes, registry artifacts, network connections, and memory-resident malware.
Topics
Community Discussion
No community discussion yet for this question.