Redline

A free memory and host analysis tool for investigating malware, rootkits, and suspicious activity.

Redline is a powerful host-based forensic tool developed by Mandiant (a division of Google Cloud), designed to perform memory and file system analysis on Windows systems. It enables analysts to inspect volatile memory, analyze artifacts of user activity, and detect indicators of compromise (IOCs) with precision. Redline is widely used by digital forensi…