Memory Challenge 4: Remember Me

We’re testing our Memory Analysis package (currently in beta) against various challenges available online.

We found this challenge on the Memory Forensic site, so credit goes to them for highlighting it and to CyberTalents for creating it in the first place. The challenge can be downloaded directly from here.

Continue reading “Memory Challenge 4: Remember Me”

Memory Challenge 3: Invisible

We’re testing our Memory Analysis package (currently in beta) against various challenges available online.

We found this challenge on the Memory Forensic site, so credit goes to them for highlighting it and to CyberTalents for creating it in the first place. The challenge can be downloaded directly from here.

Continue reading “Memory Challenge 3: Invisible”

Memory Challenge 2: MEM Challenge

We’re testing our Memory Analysis package (currently in beta) against various challenges available online.

We found this challenge on the Memory Forensic site, so credit goes to them for highlighting it and to the BlackHat MEA Team for creating it in the first place. The challenge can be downloaded directly from here.

Continue reading “Memory Challenge 2: MEM Challenge”

Memory Challenge 1: Reveal

We’re testing our Memory Analysis package (currently in beta) against various challenges available online. In this case, we combined the memory analysis with our soon-to-be-released AI Assistant package to solve the challenge in an automated way.

The challenge was created by the CyberDefenders team and can be downloaded from their website.

Continue reading “Memory Challenge 1: Reveal”

WIM Format Package

We’re excited to announce the release of the WIM Format package, which adds support for the Windows Imaging (WIM) file format.

Once installed, you can explore the contents of WIM images directly in Cerbero Suite. This includes browsing the file hierarchy, inspecting individual files, and performing in-depth forensic analysis.

Additionally, when used in conjunction with the ISO Format package, it’s possible to seamlessly access WIM images embedded within ISO files—making the analysis of Windows installation media even more efficient.

Prototype Memory & Services

We are excited to announce the release of version 0.3 of our Memory Analysis package, currently in beta. This update introduces two major features: support for prototype Page Table Entries (PTEs) and the ability to enumerate and display Windows services from memory captures.

Continue reading “Prototype Memory & Services”