Checking for memory artefacts

VMware leaves many artefacts in memory. Some are critical processor structures, which, because they are either moved or changed on a virtual machine, leave recognisable footprints. Malware can search through physical memory for the strings VMware, commonly used to detect memory artifacts.

Additional Resources

Subscribe to our Newsletter and don't miss important updates