Find files from a full memory dump

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!


I have a memory dump of a linux system.

Do you know some forensics tools which can help me to find files from
that memory? I tried grep + strings but I don't go far.

This is an ARM-based linux system.

Any pointer to forensics tools would be appreciable, This is legal
analysis, this is for a challenge.


Site Timeline