# Memory

> Memory dump analysis - process injection, credential extraction, malware

- Skill: `majiayu000/memory-10` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds add majiayu000/memory-10`
- Raw SKILL.md: https://api.skillmd.com/api/skills/majiayu000/memory-10/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: AI & ML
- Author: majiayu000 (https://skillmd.com/u/majiayu000)
- Updated: 2026-09-09
- Page: https://skillmd.com/skills/majiayu000/memory-10

---


# Memory Forensics

Analyze memory dumps:
- Process enumeration
- Hidden process detection
- DLL analysis
- Code injection detection
- Network connections
- Credential extraction
- Registry artifacts
- Timeline generation

## Required Context
1. **Dump File**: Path to memory dump
2. **Focus**: Injection, credentials, network, all
3. **OS**: Windows/Linux (auto-detect)

## Tools Used
Volatility 3, strings

## Example
```
/memory
Dump: /forensics/memory.dmp
Focus: Injection detection, credentials
```

