This tool is a SOC-style memory forensics platform that analyzes Windows memory dumps using Volatility and YARA rules to detect malware, suspicious processes, and network activity.
- Memory Dump Analysis (Volatility 3)
- Process Listing
- Network Connections Analysis
- Malware Detection (Malfind + YARA)
- Threat Scoring Engine
- PDF Report Export
- Modern SOC Dashboard UI (PyQt5)
git clone https://github.com/your-username/memory-forensics-tool
cd memory-forensics-tool
pip install -r requirements.txt
Run Application
python main.py
Dataset
Place memory dumps inside /samples folder.
Tools Used
Volatility 3
YARA
PyQt5
Python
Future Improvements
Live process tree visualization
SIEM integration
Real-time memory capture
AI-based anomaly detection