mrRobot memory forensics challenge


This lab is made by CyberDefenders.

Lab Scenario

“An employee reported that his machine started to act strangely after receiving a suspicious email for a security update. The incident response team captured a couple of memory dumps from the suspected machines for further inspection. Analyze the dumps and help the SOC analysts team figure out what happened!”

Downloading the Memory Dump / Running on the Cloud Lab

Please visit the lab official link to download the memory dump.

Used Tools


To uncompress the lab (pass:


In this blog, I briefly notified you about a newly released memory forensic challenge.

~ Cya in the Next One

Leave a Reply