TLDRBins TLDRBins / Memory Dump

Usage Tips:

  • Click on a keyword to enable inline editing.
  • Click inside a code block to copy (excludes comments).
  • Use the button to view examples.
  • Click outside to collapse all examples.

Tools

# Extract files from memory dump
binwalk -M -e <MEMORY_DUMP>

Sample Output:
TO-DO

Ref: binwalk

# Mini dump
pypykatz lsa minidump <MEMORY_DUMP>

Sample Output:
TO-DO
./memprocfs -mount <PATH> -device <MEMORY_DUMP>

Sample Output:
TO-DO

Ref: MemProcFS