8

Memory Samples

gleeda edited this page 2019-03-22 15:56:34 -05:00

This is a list of publicly available memory samples for testing purposes.

Description	OS
Art of Memory Forensics Images	Assorted Windows, Linux, and Mac
Mac OSX 10.8.3 x64	Mac Mountain Lion 10.8.3 x64
Jackcr's forensic challenge	Windows XP x86 and Windows 2003 SP0 x86 (4 images)
GrrCon forensic challenge ISO (also see PDF questions)	Windows XP x86
Malware Cookbook DVD	Black Energy, CoreFlood, Laqma, Prolaco, Sality, Silent Banker, Tigger, Zeus, etc
Malware - Cridex	Windows XP SP2 x86
Malware - Shylock	Windows XP SP3 x86
Malware - R2D2 (pw: infected)	Windows XP SP2 x86
Windows 7 x64	Windows 7 SP1 x64
NIST (5 samples)	Windows XP SP2, 2003 SP0, and Vista Beta 2 (all x86)
Hogfly's skydrive (13 samples)	Assorted (mostly Windows XP x86)
Moyix's Fuzzy Hidden Process Sample	Windows XP SP3 x86
Honeynet Banking Troubles Image	Windows XP SP2 x86
NPS 2009-M57 (~70 samples)	Various XP / Vista x86
Dougee's comparison samples	WIndows XP x86
DFRWS 2008 Forensic Challenge	CentOS
Honeynet Compromised Server Challenge	Linux Debian 2.6.26-26 x86
Pikeworks Linux Samples	Linux CentOS and Ubuntu (x86/x64)
DFRWS 2011 Forensics Challenge	Android
DFRWS 2012 Rodeo	Android

Home

Getting Started

• FAQ
• Installation
• Linux
• Mac
• Android
• Basic Usage
• 2.6 Win Profiles
• Encrypted KDBG
• Pyinstaller Builds
• Unified Output

Command References

• Windows Core
• Windows GUI
• Windows Malware
• Linux
• Mac OSX

Development

• Windows Registry
• Address Spaces
• Style Guide

Miscellaneous

• Memory Samples
• Community Docs

Physical Address Spaces

• Firewire
• Crash Dumps
• Hibernation Files
• EWF Files
• LiME (Linux)
• VirtualBoxELF64
• VMWare Snapshot
• Hpak (FDPro)

Volatility Foundation