Security/Automation/WinterOfSecurity2014
< Security | Automation
Jump to navigation
Jump to search
Winter Of Security 2014
Web Security
Forensic
Cross-platform memory scanning in Go
- mentor**: Julien Vehent
The Mozilla InvestiGator (MIG) project needs a way to inspect the content of the memory of a system, and detect threats. The typical approach in memory forensic is to dump the memory of a system, and perform analysis on another system, using tools like Volatility. We are looking for an approach that is less invasive, where an agent running on a target system can inspect its own memory without disrupting operations. Existing libraries, such as Volatility, as hard to ship to remote system. The goal of this project is to design and build a lean, cross-platform, memory inspection library in the Go language that can be integrating into MIG.