<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Memory &#8211; Cerbero Blog</title>
	<atom:link href="https://blog.cerbero.io/tag/memory/feed/" rel="self" type="application/rss+xml" />
	<link>https://blog.cerbero.io</link>
	<description></description>
	<lastBuildDate>Tue, 24 Jun 2025 10:28:50 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	<generator>https://wordpress.org/?v=7.0</generator>

<image>
	<url>https://blog.cerbero.io/wp-content/uploads/2023/09/cropped-pro_icon_512-32x32.png</url>
	<title>Memory &#8211; Cerbero Blog</title>
	<link>https://blog.cerbero.io</link>
	<width>32</width>
	<height>32</height>
</image> 
<site xmlns="com-wordpress:feed-additions:1">184292133</site>	<item>
		<title>Memory Analysis Package 0.4</title>
		<link>https://blog.cerbero.io/memory-analysis-package-0-4/</link>
					<comments>https://blog.cerbero.io/memory-analysis-package-0-4/#respond</comments>
		
		<dc:creator><![CDATA[Erik Pistelli]]></dc:creator>
		<pubDate>Tue, 24 Jun 2025 10:28:50 +0000</pubDate>
				<category><![CDATA[Package]]></category>
		<category><![CDATA[Hooking]]></category>
		<category><![CDATA[IAT]]></category>
		<category><![CDATA[Memory]]></category>
		<guid isPermaLink="false">https://blog.cerbero.io/?p=3166</guid>

					<description><![CDATA[We&#8217;ve released version 0.4 of the Memory Analysis package, currently in beta for our commercial customers and soon to be available for personal licenses too. The main highlight is that, thanks to Cerbero Suite 8.4, all tables now support sorting — but there are other new features as well, which we’ll cover in this blog &#8230; <a href="https://blog.cerbero.io/memory-analysis-package-0-4/" class="more-link">Continue reading<span class="screen-reader-text"> "Memory Analysis Package 0.4"</span></a>]]></description>
		
					<wfw:commentRss>https://blog.cerbero.io/memory-analysis-package-0-4/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">3166</post-id>	</item>
		<item>
		<title>Prototype Memory &#038; Services</title>
		<link>https://blog.cerbero.io/prototype-memory-services/</link>
					<comments>https://blog.cerbero.io/prototype-memory-services/#respond</comments>
		
		<dc:creator><![CDATA[Erik Pistelli]]></dc:creator>
		<pubDate>Mon, 05 May 2025 10:21:29 +0000</pubDate>
				<category><![CDATA[Forensics]]></category>
		<category><![CDATA[Package]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Dump]]></category>
		<category><![CDATA[Memory]]></category>
		<category><![CDATA[Snapshot]]></category>
		<category><![CDATA[windows]]></category>
		<guid isPermaLink="false">https://blog.cerbero.io/?p=3139</guid>

					<description><![CDATA[We are excited to announce the release of version 0.3 of our Memory Analysis package, currently in beta. This update introduces two major features: support for prototype Page Table Entries (PTEs) and the ability to enumerate and display Windows services from memory captures. Prototype PTEs are a crucial aspect of Windows memory management. These entries &#8230; <a href="https://blog.cerbero.io/prototype-memory-services/" class="more-link">Continue reading<span class="screen-reader-text"> "Prototype Memory &#038; Services"</span></a>]]></description>
		
					<wfw:commentRss>https://blog.cerbero.io/prototype-memory-services/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">3139</post-id>	</item>
		<item>
		<title>Memory Decompression &#038; Pagefiles</title>
		<link>https://blog.cerbero.io/memory-decompression-pagefiles/</link>
					<comments>https://blog.cerbero.io/memory-decompression-pagefiles/#respond</comments>
		
		<dc:creator><![CDATA[Erik Pistelli]]></dc:creator>
		<pubDate>Mon, 28 Apr 2025 15:04:47 +0000</pubDate>
				<category><![CDATA[Forensics]]></category>
		<category><![CDATA[Package]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Dump]]></category>
		<category><![CDATA[Memory]]></category>
		<category><![CDATA[Snapshot]]></category>
		<category><![CDATA[windows]]></category>
		<guid isPermaLink="false">https://blog.cerbero.io/?p=3132</guid>

					<description><![CDATA[Windows 10 (version 1507) introduced memory compression, a feature that allows certain memory pages to be compressed and managed by the &#8220;MemCompression&#8221; process. As a result, in a memory snapshot, some pages may be unavailable because they reside in compressed memory. Memory compression in Windows is optional and can be disabled if desired, but it &#8230; <a href="https://blog.cerbero.io/memory-decompression-pagefiles/" class="more-link">Continue reading<span class="screen-reader-text"> "Memory Decompression &#038; Pagefiles"</span></a>]]></description>
		
					<wfw:commentRss>https://blog.cerbero.io/memory-decompression-pagefiles/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">3132</post-id>	</item>
		<item>
		<title>Windows Crash Dump Format 2.1 Package</title>
		<link>https://blog.cerbero.io/windows-crash-dump-format-2-1-package/</link>
					<comments>https://blog.cerbero.io/windows-crash-dump-format-2-1-package/#respond</comments>
		
		<dc:creator><![CDATA[Erik Pistelli]]></dc:creator>
		<pubDate>Wed, 02 Apr 2025 08:50:35 +0000</pubDate>
				<category><![CDATA[Package]]></category>
		<category><![CDATA[Crash Dump]]></category>
		<category><![CDATA[Debug]]></category>
		<category><![CDATA[Forensics]]></category>
		<category><![CDATA[Memory]]></category>
		<guid isPermaLink="false">https://blog.cerbero.io/?p=3122</guid>

					<description><![CDATA[We&#8217;ve updated the Windows Crash Dump Format package to support inspecting kernel memory dumps through the Memory Analysis package.]]></description>
		
					<wfw:commentRss>https://blog.cerbero.io/windows-crash-dump-format-2-1-package/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">3122</post-id>	</item>
		<item>
		<title>Memory Analysis Package</title>
		<link>https://blog.cerbero.io/memory-analysis-package/</link>
					<comments>https://blog.cerbero.io/memory-analysis-package/#respond</comments>
		
		<dc:creator><![CDATA[Erik Pistelli]]></dc:creator>
		<pubDate>Tue, 25 Mar 2025 08:46:58 +0000</pubDate>
				<category><![CDATA[Forensics]]></category>
		<category><![CDATA[Package]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Dump]]></category>
		<category><![CDATA[Memory]]></category>
		<category><![CDATA[Snapshot]]></category>
		<category><![CDATA[windows]]></category>
		<guid isPermaLink="false">https://blog.cerbero.io/?p=3108</guid>

					<description><![CDATA[We&#8217;re excited to announce the release of the new Memory Analysis package, capable of analyzing memory dumps from all Windows versions, from XP to 11, both x86 and x64. The package will be available to all licenses of Cerbero Suite. Today we&#8217;re rolling out the beta for all commercial licenses, and it will be accessible &#8230; <a href="https://blog.cerbero.io/memory-analysis-package/" class="more-link">Continue reading<span class="screen-reader-text"> "Memory Analysis Package"</span></a>]]></description>
		
					<wfw:commentRss>https://blog.cerbero.io/memory-analysis-package/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">3108</post-id>	</item>
		<item>
		<title>Windows Memory Forensics: Close to Release</title>
		<link>https://blog.cerbero.io/windows-memory-forensics-close-to-release/</link>
					<comments>https://blog.cerbero.io/windows-memory-forensics-close-to-release/#respond</comments>
		
		<dc:creator><![CDATA[Erik Pistelli]]></dc:creator>
		<pubDate>Sun, 05 Nov 2017 22:21:18 +0000</pubDate>
				<category><![CDATA[Forensics]]></category>
		<category><![CDATA[Suite Advanced]]></category>
		<category><![CDATA[Memory]]></category>
		<category><![CDATA[Raw images]]></category>
		<guid isPermaLink="false">http://cerbero-blog.com/?p=1682</guid>

					<description><![CDATA[We&#8217;re extremely proud to announce that the upcoming 2.8 version of Profiler Advanced comes with full-fledged support for raw Windows memory images! As few of our users might remember a two years old demo about this topic. Thanks to the work of the past months of our team, we could finalize that idea into a &#8230; <a href="https://blog.cerbero.io/windows-memory-forensics-close-to-release/" class="more-link">Continue reading<span class="screen-reader-text"> "Windows Memory Forensics: Close to Release"</span></a>]]></description>
		
					<wfw:commentRss>https://blog.cerbero.io/windows-memory-forensics-close-to-release/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">1682</post-id>	</item>
	</channel>
</rss>
