inVtero.net
A high-speed memory forensics tool for analyzing physical memory dumps to find/extract processes and hypervisors using virtual machine introspection.
What is inVtero.net?
inVtero.net is a high-speed memory forensics tool that analyzes physical memory dumps to extract processes and hypervisors using Virtual Machine Introspection (VMI). It solves the problem of forensic analysis in multi-gigabyte memory snapshots by operating independently of OS structures and microarchitecture, enabling reliable detection even in manipulated environments.
Digital forensics analysts, security researchers, and incident responders who need to inspect physical memory dumps for malware, hypervisors, or process extraction across various platforms.
Developers choose inVtero.net for its high-speed processing (Gbps), OS-agnostic analysis using VMI techniques, and ability to handle nested hypervisors without relying on easily manipulated OS structures.
Overview
inVtero.net: A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extract processes, hypervisors (including nested) in memory dumps using microarchitechture independent Virtual Machiene Introspection techniques
Use Cases
Best For
- Analyzing physical memory dumps from Windows, Linux, or BSD systems for forensic investigations
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
