Learn

Achievements

Capture The Flag

Network and DLL Analysis in Volatility

COURSE LESSON

Continue your learning

Sign in to access your enrolled courses, or view the course details before enrolling.

Sign in View course
Memory Analysis with Volatility Framework

In this final lecture, you’ll examine network connections, loaded DLLs, and potential lateral movement indicators. You'll learn how to detect unauthorized connections and trace back malicious libraries loaded in memory.

Key topics:

  • netscan, connscan, and sockets plugins

  • DLL loading behavior in Windows

  • Detecting unsigned/malicious DLLs

  • Correlating process and network artifacts