Microsoft launches free Linux memory forensics tool for detecting malware

Microsoft launches free Linux memory forensics tool for detecting malware

The new project has been named Freta by Microsoft.


In digital forensics, there are a variety of techniques that can be used to evaluate the data security analysts come across. One of these happens to be memory forensics in which a snapshot of the current state of a system is obtained to find any malware that may be lurking inside.


In line with this, Microsoft has just announced a new project called Freta which is focused on detecting both rootkits and other types of advanced malware through memory forensics.


See: Top 7 Most Popular and Best Cyber Forensics Tools


Completely cloud-based; the tool was built by the NExT Security Ventures (NSV) team at Microsoft Research for Linux systems specifically.

The tool can be accessed via an online portal at freta.azurewebsites.net as shown below. However, you must have a Microsoft account such as @Msn.com, @Outlook.com, @Live.om, or @Hotmail.com to access to the tool.



The benefit of this is that many users can scan the memory of thousands of virtual machines very easily now without any complex setup, that too in a reasonably short timeframe. All they need to do is submit the image of the system and the program will do its job generating a report.


microsoft launches linux memory forensics detecting malware