Memory Forensics Enumeration
DLL’s are used to be shared among processes for code reusability. These get linked to process via dynamic linking, as dependencies of other DLLs and even via injection. Since DLLs lives under a process, they got full access to process memory space. dlllist This plugin traverses the dll list to find the loaded dlls per process. This plugin will miss out on hidden dlls. Ldrmodules This is a very useful plugin to find out the hidden DLLs....