Sans 508 Index Github Guide

| Plugin | Purpose | Example | |--------|---------|---------| | windows.pslist | List processes | vol -f mem.dump windows.pslist | | windows.psscan | Find unlinked processes | vol -f mem.dump windows.psscan | | windows.cmdline | Show process command lines | vol -f mem.dump windows.cmdline | | windows.netscan | Network connections | vol -f mem.dump windows.netscan | | windows.malfind | Detect injected code | vol -f mem.dump windows.malfind | | windows.modscan | Scan for kernel modules | vol -f mem.dump windows.modscan |

: A fast terminal-based program inspired by the "Voltaire" and "Pancakes" indexing methods. 3. Specialized Incident Response Resources sans 508 index github