Rekall Framework is a completely open set of tools that works on any platform that supports Python. It supports the research of the following 32-bit and 64-bit memory images. Rekall also provides a complete memory sampling capability for all major operating systems. In addition, Rekall has a complete graphical interface for writing reports and analysis of driving.
You can find more information about this toolbox in this article.
DISCLAIMER: THIS POST IS FOR INFORMATIONAL PURPOSES ONLY AND IS NOT TO BE CONSIDERED LEGAL ADVICE ON ANY SUBJECT MATTER. DIGITAL FORENSICS CORP. IS NOT A LAWFIRM AND DOES NOT PROVIDE LEGAL ADVICE OR SERVICES. By viewing posts, the reader understands there is no attorney-client relationship, the post should not be used as a substitute for legal advice from a licensed professional attorney, and readers are urged to consult their own legal counsel on any specific legal questions concerning a specific situation.
