Maybe a cool feature would be to have a simply query language with saved queries that can be run on plugin/multiple plugins output to analyze the processed memory image. can be very useful community-wise and help automate the investigation of a memory image.
Some examples:
Query over PsList -> find suspicious processes relations, statistics based/etc
Query over vad -> find suspicious regions without implementing a new plugin(e.g malfind)
Maybe a cool feature would be to have a simply query language with saved queries that can be run on plugin/multiple plugins output to analyze the processed memory image. can be very useful community-wise and help automate the investigation of a memory image.
Some examples:
Query over PsList -> find suspicious processes relations, statistics based/etc
Query over vad -> find suspicious regions without implementing a new plugin(e.g malfind)