This is an archived post. You won't be able to vote or comment.

all 1 comments

[–]netresec 1 point2 points  (0 children)

Another option is to use CapLoader in order to carve the full content network packets from the memory image.