1 repository
Modifying memory images and erasing headers to prevent the capture of usable process dumps.
Distinct from Binary Memory Dumping: Distinct from Binary Memory Dumping: focuses on preventing the dump from being successful rather than performing the dump.
Explore 1 awesome GitHub repository matching operating systems & systems programming · Memory Dump Prevention. Refine with filters or upvote what's useful.
Al-Khaser is a research project focused on the development of anti-analysis and evasion techniques to resist reverse engineering. It provides implementations for detecting and evading virtual machines, sandboxes, and debuggers to prevent software analysis. The project implements control flow obfuscation through anti-disassembly methods and utilizes dynamic API resolution to bypass static import tables. It further hinders forensic analysis by manipulating memory headers to prevent process dumps and utilizing remote code injection to execute logic in external processes. The capability surface
Modifies image sizes or erases headers in memory to prevent analysts from capturing usable process dumps.