Phil Sajdak

Here is a kernel-level forensics/debugging application I have currently been working on. It works with physical memory directly via memory mapping on processes, drivers, and more.