package
0.0.0-20200513194339-0b02afc222a7
Repository: https://github.com/cptofevilminions/osquery-memory-forensics.git
Documentation: pkg.go.dev

# Functions

CreateForensicsDirectory input: Path to direcctory to save forensic data If directory exists it skips, else create it.
MemoryDump input: foresincDataDirectory, pid If PID is provided it will proceed with a memory dump of that process, else will default to a full memory dump MemoryDump output: Returns result, name of new dump (if sucessful), and status.