varc
varc copied to clipboard
cado-security
Volatile Artifact Collector collects a snapshot of volatile data from a system. It tells you what is happening on a system, and is of particular use when investigating a security incident.
For example: on linux, glibc 2.15 is a minimum, needed for the "process_vm_readv" syscall. That excludes older linuxes unfortunately. Now the aplication just crashes: ``` [2022-09-21 10:58:39,701]:[INFO] - Adding open...
Ran into some issues with lz4 support where we attempt to reopen the file for writing as a zip later in the process. Suggest reviewing commits separately since this includes...
Metadata
Owner
Metadata
Volatile Artifact Collector collects a snapshot of volatile data from a system. It tells you what is happening on a system, and is of particular use when investigating a security incident.