Intel Graph/Forensic Artifacts
Digital Forensics & Incident Response2 Approved Artifact Entities

Forensic Artifacts

Volatile memory triage dumps, encrypted containers, disassemblies, and OSINT evidence mapped to forensic tool chains.

View in Graph Explorer
Source: MemoryWindows

Amadey Windows Memory Dump

Volatile physical memory image captured from an endpoint infected by Amadey Trojan Stealer.

Hook:Volatility 3 windows.pstree
Analyzed In Investigation:Amadey Trojan
Evidence Grounded
DFIR Verified
Source: DiskCross-Platform

words.wasm WebAssembly Binary

Compiled WebAssembly binary containing static linear memory strings and game validation logic.

Hook:WABT wasm-decompile
Analyzed In Investigation:Daily RE
Evidence Grounded
DFIR Verified