Tech Fixx · Video
Advanced Memory Forensics with Volatility 3: Stealth Malware | Part 12
Watch this 3 min 35 sec video from the Tech Fixx channel, published .
Check that the device, software and version shown match your setup. Use the player controls for captions, playback speed and full screen where available.
Loading the player connects to YouTube. If playback is unavailable here, watch on YouTube ↗.
Captions and text transcripts
After loading the player, use its CC control to turn on captions when available. To look for a text transcript, use the Watch on YouTube link above, expand the video description and select “Show transcript” if offered.
Caption and transcript availability varies by video, and automatic captions may contain mistakes. The original channel description is separate from a transcript. Caption accuracy, audio description and text alternatives have not been verified for every video in this library.
From the video description
Original channel description, recorded . Product, software and service references in it may have changed since publication.
Part 12 moves from basic memory acquisition to advanced analysis of suspicious processes, injected code and network artifacts using Volatility 3 concepts. The goal is to form and test evidence-based hypotheses, not rely on one plugin or indicator.
You’ll learn: • Preserving and validating a memory image • Building a process and parent-child baseline • Looking for injection and process-hollowing indicators • Reviewing modules, handles and network connections • Correlating findings with disk, logs and endpoint telemetry • Recording commands, tool versions and results • Distinguishing a suspicious artifact from proof of compromise
Chapters: 0:00 The Fileless Threat 1:45 Volatile Data Preservation 4:15 Analysing Injected Threads 8:30 API Hooking & Rootkit Indicators 12:50 Reconstructing Activity 15:10 Summary & Part 13
Use only in authorised investigations or isolated training labs.
#MemoryForensics #Volatility3 #MalwareAnalysis