Blog

Some Use Cases and Discussion
Review all Open Files Accessed by Processes in Memory
Review all Open Files Accessed by Processes in Memory 1024 785 WindowsSCOPE

‘Process’ is the process that is using a selected entry, ‘File Name’ is the file or folder being used, and ‘Access Rights’ is what permissions the process has. One thing to note is that the…

read more
How to Capture/Analyze Network Activities from Memory
How to Capture/Analyze Network Activities from Memory 1024 786 WindowsSCOPE

  Any network connection can then be examined. For example, take a closer look at the Firefox connection in the example snapshot that has a ‘Destination’ 74.125.93.105:80. This means that the process is accessing the…

read more
Review and capture Import and Export Address Tables from Memory
Review and capture Import and Export Address Tables from Memory 1024 785 WindowsSCOPE

What is a DLL: A DLL (Dynamic-Link Library) can be thought of as a library of code and data that can be used by many programs at once. Essentially, it contains functions that can be…

read more
Introduction to WindowsSCOPE – a Tutorial Video
Introduction to WindowsSCOPE – a Tutorial Video 150 150 WindowsSCOPE

You can access the video here.

read more
Windowsscope Blog introduced
Windowsscope Blog introduced 150 150 WindowsSCOPE

WindowsSCOPE is a tool to learn and analyze the internals of the Windows operating system and everything it runs. Use it to learn to master operating systems, the Windows kernel, virtual memory management, x86 memory…

read more
Phantom Probe Agent Launched for WindowsSCOPE
Phantom Probe Agent Launched for WindowsSCOPE 450 310 WindowsSCOPE

BlueRiSC’s WindowsSCOPE Cyber Analysis Tool Suite Enhanced with Phantom Probe Agent Amherst, MA, April 4, 2011 – BlueRiSC enhances its WindowsSCOPE™ reverse-engineering, cyber analysis and defense, and memory forensics tool suite by adding the ability…

read more
Official WindowsSCOPE Launch
Official WindowsSCOPE Launch 450 310 WindowsSCOPE

 BlueRiSC officially releases WindowsSCOPE Pro 1.0 Amherst, MA, March 16, 2011 – BlueRiSC Inc. announces the official launch of WindowsSCOPE, a sophisticated and must-have tool to fully understand and analyze Windows machines―your “Window into Windows.”…

read more