Memory & Process Analysis

Inspect a live process or an offline memory image.

3 entries · reviewed 2026-10-10 · GitHub data 2026-10-26

Tool	Use it when	Cost	Last push · Stars
Sysinternals	Process Explorer, Process Monitor and friends for watching what a Windows program does.	Free	website
Volatility 3	Offline memory image analysis: processes, modules, handles, network.	Free	2026-10 · ★ 4.5k
PE-sieve	Scans a running process for implants, hooks and in-memory patches and dumps them. ▶ runs	Free	2026-06 · ★ 3.9k

Flags: ▶ runs code (use an isolated VM) · ☁ sends code to a third party · ◆ commonly impersonated (official link only) · ⚠ maintenance concern