memory-analysis

Historical Windows temporal memory-state research artifact for studying time-bound memory observations, validation limits, and defensive visibility.

Allows you to quickly query a Windows machine for RAM artifacts

Process heap analysis framework - Windows/Linux - record type inference and forensics

MCP Cheat Engine Server — provides safe, structured read-only access to memory analysis and debugging functionality through the Model Context Protocol (MCP). For developers, security researchers, and game modders.

👀Dynamic memory watcher/tracer/analyzer for CTF pwn

pwn & ctf tools for windows

一个面向大模型训练场景的显存分析工具

Emma Memory and Mapfile Analyser

A Python-based tool for analyzing and manipulating the memory of running processes on a Windows system. Features include listing processes, searching for processes by name or PID, scanning memory for specific values, writing values to memory, and checking for changes in memory values.

Introducing the Temporal Dimension to Memory Forensics - ACM Transactions on Privacy and Security 2019

A powerful and user-friendly GUI tool for digital forensics investigations. InvestiGUI streamlines the investigative workflow by providing modules for memory analysis, disk examination, artifact extraction, and reporting—all within an intuitive interface. Ideal for cybersecurity professionals, students, and incident responders

Detailed VRAM profiler for transformer inference with per-layer breakdown, activation analysis, and a predictive memory model that predicts VRAM with <1.2% error. Shows that FFN layers dominate static memory and that measured runtime VRAM exceeds KV-cache estimates by 2-4x.

A RAM-only, AI-enhanced, stealth operating environment for red team simulations and cyber defense training.

Turn GNU linker map files into readable firmware memory reports and CI budgets.

A POC tool for initial quick memory analysis. DFIR for fun and learning!

Collection of scripts to analyze the memory accesses on HEVC and VVC Test Models

MCP server that enables AI assistants to analyze JVM heap dumps using Eclipse Memory Analyzer (MAT).

A ProcInjectionsFind volatility plugin runs against malware-infected memory images or memory of live VMs and examines each memory region of all running processes to conclude if it is the result of process injection.

This script allows you to connect to a serial port and display incoming data in real-time. It also includes options to format, filter, and log the data.