I just found out about @msuiche's DumpIt and platform for analyzing memory dumps. I don't do forensics that often, but it seriously just cut my workflow from 6 hours to 15 min. Awesome tool.— Carter (@CarterMcKelvain) January 21, 2019
I confirm that Comae has so much innovation in here. This is definitely a quick win solution for servers where we can not contractually apply updates such as ones in plants.— Vincent Le Toux (@mysmartlogon) February 18, 2018
Something between « run the AV » (which detect nothing) and a full month forensic investigation.