memory-forensics
Comprehensive techniques and tools for memory acquisition and forensic analysis using the Volatility 3 framework.
Install
npx skills add https://github.com/wshobson/agents --skill memory-forensicsStats
| Total installs | 3,661 |
| Weekly installs | 3.6K |
| GitHub stars | 32.4K |
| First seen | Jan 20, 2026 |
| Source | @wshobson/agents |
Summary
- Supports live memory acquisition across Windows (WinPmem, DumpIt), Linux (LiME, /dev/mem), and macOS (osxpmem), plus virtual machine memory from VMware, VirtualBox, QEMU, and Hyper-V
- Volatility 3 framework with 30+ plugins covering process analysis, network connections, DLL inspection, code injection detection, registry analysis, and file system artifacts
- Includes malware analysis and incident response workflows with process tree visualization, hidden process detection, persistence mechanism discovery, and YARA integration for pattern matching
- Detects injection techniques, rootkits, and credential artifacts; supports string extraction and cross-referencing across multiple data sources for timeline correlation
Tags
Related skills
| Skill | Installs | vs memory-forensics |
|---|---|---|
| dependency-upgrade | 3,577 | -84 |
| deployment-pipeline-design | 4,348 | +687 |
| dependency-updater | 3,457 | -204 |
| secrets-management | 3,905 | +244 |
| stride-analysis-patterns | 3,330 | -331 |
FAQ
- How many installs does memory-forensics have?
- memory-forensics has 3,661 total installs and 3.6K installs this week.
- Where is memory-forensics hosted?
- memory-forensics is published by @wshobson/agents at https://github.com/wshobson/agents.
- How many GitHub stars does memory-forensics have?
- memory-forensics has 32.4K GitHub stars.
- When was memory-forensics first indexed?
- OrangeBot.AI first indexed memory-forensics on Jan 20, 2026.
- How do I install memory-forensics?
- Run: npx skills add https://github.com/wshobson/agents --skill memory-forensics