In-memory threat hunter: detects injected shellcode, phantom DLLs, hollowed regions, RWX pages with entropy analysis and MITRE ATT&CK mapping
python dfir malware-analysis red-team memory-forensics windows-internals process-injection shellcode-detection
-
Updated
Mar 1, 2026 - Python