<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Dump &#8211; Cerbero Blog</title>
	<atom:link href="https://blog.cerbero.io/tag/dump/feed/" rel="self" type="application/rss+xml" />
	<link>https://blog.cerbero.io</link>
	<description></description>
	<lastBuildDate>Mon, 05 May 2025 10:21:29 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	<generator>https://wordpress.org/?v=7.0</generator>

<image>
	<url>https://blog.cerbero.io/wp-content/uploads/2023/09/cropped-pro_icon_512-32x32.png</url>
	<title>Dump &#8211; Cerbero Blog</title>
	<link>https://blog.cerbero.io</link>
	<width>32</width>
	<height>32</height>
</image> 
<site xmlns="com-wordpress:feed-additions:1">184292133</site>	<item>
		<title>Prototype Memory &#038; Services</title>
		<link>https://blog.cerbero.io/prototype-memory-services/</link>
					<comments>https://blog.cerbero.io/prototype-memory-services/#respond</comments>
		
		<dc:creator><![CDATA[Erik Pistelli]]></dc:creator>
		<pubDate>Mon, 05 May 2025 10:21:29 +0000</pubDate>
				<category><![CDATA[Forensics]]></category>
		<category><![CDATA[Package]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Dump]]></category>
		<category><![CDATA[Memory]]></category>
		<category><![CDATA[Snapshot]]></category>
		<category><![CDATA[windows]]></category>
		<guid isPermaLink="false">https://blog.cerbero.io/?p=3139</guid>

					<description><![CDATA[We are excited to announce the release of version 0.3 of our Memory Analysis package, currently in beta. This update introduces two major features: support for prototype Page Table Entries (PTEs) and the ability to enumerate and display Windows services from memory captures. Prototype PTEs are a crucial aspect of Windows memory management. These entries &#8230; <a href="https://blog.cerbero.io/prototype-memory-services/" class="more-link">Continue reading<span class="screen-reader-text"> "Prototype Memory &#038; Services"</span></a>]]></description>
		
					<wfw:commentRss>https://blog.cerbero.io/prototype-memory-services/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">3139</post-id>	</item>
		<item>
		<title>Memory Decompression &#038; Pagefiles</title>
		<link>https://blog.cerbero.io/memory-decompression-pagefiles/</link>
					<comments>https://blog.cerbero.io/memory-decompression-pagefiles/#respond</comments>
		
		<dc:creator><![CDATA[Erik Pistelli]]></dc:creator>
		<pubDate>Mon, 28 Apr 2025 15:04:47 +0000</pubDate>
				<category><![CDATA[Forensics]]></category>
		<category><![CDATA[Package]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Dump]]></category>
		<category><![CDATA[Memory]]></category>
		<category><![CDATA[Snapshot]]></category>
		<category><![CDATA[windows]]></category>
		<guid isPermaLink="false">https://blog.cerbero.io/?p=3132</guid>

					<description><![CDATA[Windows 10 (version 1507) introduced memory compression, a feature that allows certain memory pages to be compressed and managed by the &#8220;MemCompression&#8221; process. As a result, in a memory snapshot, some pages may be unavailable because they reside in compressed memory. Memory compression in Windows is optional and can be disabled if desired, but it &#8230; <a href="https://blog.cerbero.io/memory-decompression-pagefiles/" class="more-link">Continue reading<span class="screen-reader-text"> "Memory Decompression &#038; Pagefiles"</span></a>]]></description>
		
					<wfw:commentRss>https://blog.cerbero.io/memory-decompression-pagefiles/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">3132</post-id>	</item>
		<item>
		<title>Memory Analysis Package</title>
		<link>https://blog.cerbero.io/memory-analysis-package/</link>
					<comments>https://blog.cerbero.io/memory-analysis-package/#respond</comments>
		
		<dc:creator><![CDATA[Erik Pistelli]]></dc:creator>
		<pubDate>Tue, 25 Mar 2025 08:46:58 +0000</pubDate>
				<category><![CDATA[Forensics]]></category>
		<category><![CDATA[Package]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Dump]]></category>
		<category><![CDATA[Memory]]></category>
		<category><![CDATA[Snapshot]]></category>
		<category><![CDATA[windows]]></category>
		<guid isPermaLink="false">https://blog.cerbero.io/?p=3108</guid>

					<description><![CDATA[We&#8217;re excited to announce the release of the new Memory Analysis package, capable of analyzing memory dumps from all Windows versions, from XP to 11, both x86 and x64. The package will be available to all licenses of Cerbero Suite. Today we&#8217;re rolling out the beta for all commercial licenses, and it will be accessible &#8230; <a href="https://blog.cerbero.io/memory-analysis-package/" class="more-link">Continue reading<span class="screen-reader-text"> "Memory Analysis Package"</span></a>]]></description>
		
					<wfw:commentRss>https://blog.cerbero.io/memory-analysis-package/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">3108</post-id>	</item>
	</channel>
</rss>
