Hi, My projects: Foriana (FOrensic Ram Image ANAlyzer) Version 1.0 can list processes and modules from memory dump of i386/x86_64/arm linux/bsd kernels, and provide option for reading linear memory from dumps. Theory is described in my master thesis (english) Prisafka (DIY hw keylogger) Mail me if you want source code. Still buggy in some ways. Stegeek (simple pseudo steganographic tool) http://sourceforge.net/projects/stegeek Theory only in slovak, so probably dead;) Fmem (kernel driver, that creates /dev/fmem device) /dev/fmem behave in same way that /dev/mem (direct access to physical memory), but does not have limits that /dev/mem have. It is possible to dump whole physical memory through /dev/fmem. Alternative to /dev/crash) Alzheimer Kernel driver, that erases all the available RAM Useful as protection against physical attacks against RAM. (Can be hooked on various events) Version 0.9 works on i386 and x86_64. My mail niekt0 et hysteria.sk is working. My PGP key: -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.4.6 (GNU/Linux) mQGiBEdIS8wRBADcwy0e79fAQEG1eNuaa8XlNckDvr896YbxKencsvtJ2Qp5h1x+ VQnYm6qdRmD4rw7bsAluuTnSrqNEoqAEDHw0c3r/4YifsyJ+OiRVkzzjZFr3W8YR 1+fr+/1WMzvwDI4pyf2WdEuLdRHGJAVJNqpOXxLbmtfRfc/pKmEHbn8HMwCguywx gJjCZ0ze7OX5qjF/GDmewucD/RYuk1VciKxXYQbO4B0bWaFTPIS7Fm7fZpOYGMTJ TWVmXr7yyBpcppGtz8oq71WT64eGrq8Hn2kQskHXjm5DlhNW8TS9goQ2FxojB9GF S4sSJsz+njiNF7LfvXANaiq6MljhZjEthQskk+zzJpIYp0mfgAD/IlZw76ua1jsy PfZGA/9kqxuxrf5JGuT8POnjBWmHGsyhD4AEQcaGpXvN0/bgMabBmPwLwGdGRItW e4eiJJYpnKqc14k44z+gzP8orBL7foPsVF6qjkabk66gN8wvQTgNw2enr+MxBHJA yDsJU1nQZa/mUCZkOH3SFbwHWsdnYRZM1A4POBJ7jDaXY5XjSLQbbmlla3QwIDxu aWVrdDBAaHlzdGVyaWEuc2s+iGAEExECACAFAkdIS8wCGwMGCwkIBwMCBBUCCAME FgIDAQIeAQIXgAAKCRDuJABtS3ERQQsMAKCyf5TLnD7ybhZ/r8p9vX5SrQchKgCf WaW/XXJky9HA2jjYDgwn7vtfmfe5BA0ER0hMPRAQAKUVMB9x+pqpjjNRX81b8HIw N/p0vAszJAI9O84c0prJbM4DR+Nyl5Qk8I4oa0rqqqWVt8B267fEBMac+QAYlYGB Z6BcZCQgdrX/Rm7fxOEN+MXO2mONMjCZHbNEDnWCr3tjh1aS9e7eOY5R+/qEFDQe YdNbZGtGaEL7cU8VROKXfg049Vx0yloIG4mL8visTB100sH1GgScDbhLIl5/moUp hphZadxxBhXhtkTPul2P3c4dhNfOszfnn/Sw1J5sJbP2/BVrWM7PuouImzfeCWvV U9fIyYl6OBuT2LcIta+zU1jUv17QAzhoEU2grC6lPcTgMwnv4eIDN2bKnXvdUcxL Mk1LPDWCdaIUiUpSRy8qp4PiyhkxfOBU2cJabfmhZea8d2/LtcMaDJ8xYMptbUBd TBbVaPoSlmOLuaAaulJ1KqwtxG+77hpXymkA3x1GobhItXi1nMdh/gU0upg7CFb+ GS+WUwrnf2dfO5uw3U3dHoN5PjJ0+s9f12xfb2ocZQrqS/1qmGO5rvx04G/rZIDw 6WmKgqWQEhBygJqtWkieQIztOHkZRZ44nwvrtvkPAmuRIha5dXsdePZMqfDVcUlR D+FdMSOO8vD/P/EZFJTXr6adKY60tqV149/9+m5NwRYzPMX24DzoHvACa4iMgzhI FmrjwDV8muQInyIgQ5NHAAMFD/4xbUpCiziYycH1hbxZSoDlhMGnKI7HYmpjhUhN SR//H8yzGJMegI71tmJrz0AG13PjJqKBtR6eRbm7JvgEvidu2hTCiBBzGUXG+cy+ L5j9woSNPQqtKX9Np2WKXBlEL+ciaNKfunkp+6m+TdeGZP8AOcMeOIQ78nUDRPvk 7S3kv5O69QfoZwVnICkHTITWCicTk1qvExqfbZhxYraNsJcXWoud05QmLuUqeIYg 5vdQ2MFruj5zk3zvh5/RUpIGWAzS6oF7t69Ga7VjHItfMCx1PBAaqdXeU5kLW6Cu VgrWAMQ8v3tTDFVDPlG2A23UCYkKZrhzGxfe2LdCv0JL2hZTU0lc1nW+Pq577wW0 UdJG/AW3XGpzifw8qW8nS9ChJVxtiEt5wFKBscLBL7oamEqgG744nhv2szdo61uX Re7JmwhHDMA058D5IVdVwO9vuOLmxHgkJiA3MMpy2NUJCyDr9nbpzMwiIiYI6lZQ fJh3MLGkvUo5Dyh43Ig/lIriSDqFf33GHZV1hzdntz1M5+4Pa+CGPpL0Nbf0hOot RS7NAP2CM7SPT6O5uN16xMPq1g8kgF+LfTJWhXxlNM++7VomHmIJnCAAbihP/Exm 0ZV7NVLG4gi51lNi/JQPQ09iRdAdp/dwPhK6OrVJPFXSptAWpC6IB6hCOnZ5Zh1l v/Ja3IhJBBgRAgAJBQJHSEw9AhsMAAoJEO4kAG1LcRFBbkMAni0+9PfXCWzgP4w8 u3IWLCfMYFzLAKCbPKp0sG9W1+9bx+qTViYDrrbqmw== =vRPh -----END PGP PUBLIC KEY BLOCK-----