Scanning memory with Yara-Reference-Cited by-同舟云学术

Scanning memory with Yara

Published:2017-03 Issue: Volume:20 Page:34-43
ISSN:1742-2876
Container-title:Digital Investigation
language:en
Short-container-title:Digital Investigation

Author:

Cohen Michael

Publisher

Elsevier BV

Subject

Law,Medical Laboratory Technology,Computer Science Applications

Reference26 articles.

1. Alvarez, V.M., Aug 2016. YARA. http://virustotal.github.io/yara/, (Online; Accessed 29 August 2016).

2. Similarity preserving hashing: eligible properties and a new algorithm mrsh-v2;Breitinger,2012

3. Carrier, B., Aug 2016. ifind – Find the meta-data structure that has allocated a given disk unit or file name. http://www.sleuthkit.org/sleuthkit/man/ifind.html, (Online; Accessed 29 August 2016).

4. Forensic analysis of windows user space applications through heap allocations;Cohen,2015

Cited by 19 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

1. On enhancing memory forensics with FAME: Framework for advanced monitoring and execution;Forensic Science International: Digital Investigation;2024-07

2. Memory Forensics of the OpenDaylight Software-Defined Networking (SDN) Controller;Proceedings of the 18th International Conference on Availability, Reliability and Security;2023-08-29

3. Memory‐Based Data Exfiltration Detection Methods;Data Exfiltration Threats and Prevention Techniques;2023-05-19

4. Module extraction and DLL hijacking detection via single or multiple memory dumps;Forensic Science International: Digital Investigation;2023-03

5. MRCIF: A Memory-Reverse-Based Code Injection Forensics Algorithm;Applied Sciences;2023-02-14