bridgeythegeek / ndispktscan

NDISPktScan is a plugin for the Volatility Framework. It parses the Ethernet packets stored by ndis.sys in Windows kernel space memory.
11Updated 9 years ago

Alternatives and similar repositories for ndispktscan:

Users that are interested in ndispktscan are comparing it to the libraries listed below