Educational, CTF-styled labs for individuals interested in Memory Forensics (by stuxnet999)

MemLabs Alternatives

Similar projects and alternatives to MemLabs

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a better MemLabs alternative or higher similarity.

MemLabs reviews and mentions

Posts with mentions or reviews of MemLabs. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2022-07-16.
  • Platform for training digital forensics
    1 project | /r/digitalforensics | 21 Apr 2023
  • MemLabs: Learn Memory Forensics through CTF-styled labs
    1 project | /r/netsec | 31 Aug 2022
  • Best site for memory forensic test
    1 project | /r/computerforensics | 24 Jul 2022
  • New to Forensics, Drop some Forensics tools/training content
    5 projects | /r/computerforensics | 16 Jul 2022
  • forensics volatility
    1 project | | 27 Jun 2022
    Volatility Foundation Volatility Framework 2.6 Usage: Volatility - A memory forensics analysis platform. Options: -h, --help list all available options and their default values. Default values may be set in the configuration file (/etc/volatilityrc) --conf-file=/root/.volatilityrc User based configuration file -d, --debug Debug volatility --plugins=PLUGINS Additional plugin directories to use (colon separated) --info Print information about all registered objects --cache-directory=/root/.cache/volatility Directory where cache files are stored --cache Use caching --tz=TZ Sets the (Olson) timezone for displaying timestamps using pytz (if installed) or tzset -f FILENAME, --filename=FILENAME Filename to use when opening an image --profile=WinXPSP2x86 Name of the profile to load (use --info to see a list of supported profiles) -l LOCATION, --location=LOCATION A URN location from which to load an address space -w, --write Enable write support --dtb=DTB DTB Address --shift=SHIFT Mac KASLR shift address --output=text Output in this format (support is module specific, see the Module Output Options below) --output-file=OUTPUT_FILE Write output in this file -v, --verbose Verbose information --physical_shift=PHYSICAL_SHIFT Linux kernel physical shift address --virtual_shift=VIRTUAL_SHIFT Linux kernel virtual shift address -g KDBG, --kdbg=KDBG Specify a KDBG virtual address (Note: for 64-bit Windows 8 and above this is the address of KdCopyDataBlock) ... LABS SET UP This scenario will be using MemLabs cloned from The labs contain the CTF memory images as referenced earlier.
  • I saw my definition of a worst case scenario today, all because the client didn't want to spend a little bit of money a couple years ago.
    1 project | /r/sysadmin | 22 Apr 2021
    I think your best bet to start today is to start looking at self-education options (all over youtube, reddit, google) and start shopping for jobs that either have big training budgets or are at a service provider/vendor that offers IR and try to move laterally within it. You'd be surprised by what you get from just shooting your shot. You could consider some really basic certs like Sec + (avoid CEH like the plague unless you're gov't.) or Blue Team Level 1. I like to watch guys like 13cubed, or the surviving digital forensics podcasts and courses. Also just stay aware of infosec news from sources like brian krebs or cyberwire daily. Some other things to think about are and for some good exercises. Don't feel bad for using walkthroughs your first few times. SANS 3 minutes max is also great for quick topics in DFIR
  • A note from our sponsor - SaaSHub | 29 May 2024
    SaaSHub helps you find the best software and product alternatives Learn more →


Basic MemLabs repo stats
about 3 years ago

SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives