SOC Lvl 1 / EP.42 / Volatility: The Memory Hacker's Worst Nightmare: Volatility
Volatility is a free memory forensics tool developed and maintained by Volatility Foundation, commonly used by malware and SOC analysts within a blue team or as part of their detection and monitoring solutions. Volatility is written in Python and is made up of python plugins and modules designed as a plug-and-play way of analyzing memory dumps.
This video is from the Volatility room inside of the Digital Forensics & Incident Response module of the SOC Level 1 pathway of TryHackme.
****************************
Key Resources
****************************
Want an all-in-one AntiVirus/VPN $0.07 per day?
SurfShark Link (VPN & AntiVirus For Unlimited Devices For $2.20/mo):
--- https://bit.ly/SurfShark-FullPlan
Wanna practice hacking without getting caught?
TryHackMe Discount Link:
--- https://bit.ly/TryHackMe-Discount
Wanna learn more cool shit about hacking & cybersecurity?
Subscribe to learn more about Penetration Testing & Ethical Hacking.
--- https://bit.ly/HankHackerson-YouTube
****************************
Video Time Stamps:
02:28 Introduction
03:44 Volatility Overview
05:51 Installing Volatility
09:36 Memory Extraction
11:45 Plugins Overview
17:48 Identifying Image Info & Profiles
25:08 Listing Processes and Connections
29:14 Volatility Hunting & Detection Capabilities
31:16 Advanced Memory Forensics
34:46 Practical Investigations - Case 1
50:09 Practical Investigations - Case 2
#ethicalhacker #ethicalhacking #hacker #hacking #cybersecurity #securityengineer #securityengineering #networksecurity #cybersecurityengineer #networksecurityengineer #tryhackme #pentest #pentesting #pentester #penetrationtest #penetrationtesting #penetrationtester #howtohack #howtobecomeahacker #volatility #python3 #digitalforensics #forensicinvestigation #forensics #incidentresponse #dfir