Use of visualization methods in computer security is becoming more common, and over on the KerMode.info forums, one user wrote a clever little app to visualize the various types of memory pages on a Windows machine.

MemMAP is a tool inspired by j00ru’s KernelMAP (see here). I’ve written my own version with a couple more interesting features. A list follows:

* More memory types included (kernel thread stacks and GDI objects)

* Ability to visualize the memory of a user-mode process

* Help dialog with description of memory types

* Refresh feature

via KernelMode.info • View topic – MemMAP v0.1.2.

Tags