@hal_pomeranz Hi Hal, regarding AVML memory dump, is it possible to send the output via Netcat, instead of saving it to local disk
? , because some times the compromised system would not have sufficient space
1
You might be able to use a FIFO back-ended with netcat, similar to what I describe here blogs.sans.org/computer-fore…
Aug 12, 2020 · 11:56 PM UTC
1

