Security/Automation/WinterOfSecurity2014: Difference between revisions

The Mozilla InvestiGator (MIG) project needs a way to inspect the content of the memory of a system, and detect threats. The typical approach in memory forensic is to dump the memory of a system, and perform analysis on another system, using tools like Volatility. We are looking for an approach that is less invasive, where an agent running on a target system can inspect its own memory without disrupting operations. Existing libraries, such as Volatility, as hard to ship to remote system. The goal of this project is to design and build a lean, cross-platform, memory inspection library in the Go language that can be integrating into MIG.