Towards utilizing BTF Information in Linux Memory Forensics

This post is about some work that I did on automatic profile generation for memory forensics of Linux systems. To be upfront about it: This work is somewhat half-finished &ndash; it already does something quite useful, but it could do a lot more, and it has not been evaluated thoroughly enough to be considered &ldquo;production ready&rdquo;. The reason I decided to publish it anyway is that I…