Sept. 30, 2022, 2:07 p.m. | /u/Ro0o0otkit

Computer Forensics www.reddit.com

Hi,

One problem i have with LiME is that i need to compile the kernel module for the target machine. This becomes a big headache many times specially with custom kernels.

I just found out about the AVML, which doesn't even use a kernel module it seems and it is not dependant on the target machine.

Now i haven't used it much, but wanted to ask the experts here, is there any drawback in using AVML? Considering that it is …

acquisition computerforensics linux memory

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

Information Security Engineers

@ D. E. Shaw Research | New York City

Cybersecurity Consultant- Governance, Risk, and Compliance team

@ EY | Tel Aviv, IL, 6706703

Professional Services Consultant

@ Zscaler | Escazú, Costa Rica

IT Security Analyst

@ Briggs & Stratton | Wauwatosa, WI, US, 53222

Cloud DevSecOps Engineer - Team Lead

@ Motorola Solutions | Krakow, Poland