How is the "gh0st_decode_body" file created/implemented in Chapter 18 of The Art of Memory Forensics Book?

While reading through Chapter 18 of The Art of Memory Forensics textbook, I noticed the authors modified the *gh0st\_decode.py* script from the *chopshop* suite of tools to allow the decoded streams to be outputted in **body** **format**. I looked through the source code of *gh0st\_decode.py* to see if I could figure out a way to implement that functionality, but I couldn't find anything in the book, and Google isn't much help in this case, either. Has anyone successfully modified *gh0st\_decode.py* …

art authors body book code computerforensics file forensics memory memory forensics script source code tools