memory-forensics
Acquire and analyze RAM dumps with Volatility for incident response and malware analysis.
🛡️ AgentReady threat assessment
MAESTRO 7-layer threat model + OWASP AIVSS risk score for memory-forensics, derived from its capabilities.
These scores are auto-generated from public information (the agent's own listing, docs, and repository) using the canonical OWASP AIVSS formula and the MAESTRO framework — an estimate for guidance, not a penetration test, audit, or certification. See the scoring methodology — every score is re-derived by the same automated method as an agent's public evidence changes.
Overview
An Agent Skill that injects memory-forensics workflows: live memory acquisition, process/artifact extraction, and injected-code detection using Volatility 3 and Rekall. It covers recovering credentials, sessions, and network connections from RAM captures. The skill guides the agent through triage of memory dumps during breach investigations.
Key features and capabilities
- Volatility 3 / Rekall analysis workflows
- Live memory acquisition guidance
- Injected-code and credential recovery
Use cases
- Incident-response memory triage
- Extracting malware artifacts from RAM