autopsy
autopsy copied to clipboard
New Module: Decompile DLLs and EXE files
Decompile DLLs and .exe's and display assembly code as a content viewer module, ideally this could happen on ingest and output could be passed through keyword search.
Using objdump and MS DUMPBIN could be a way to get us the assembly code.