These pages contain references relevant to memory analysis.

The Rekall team is dedicated to promote and educate forensic investigators and incident responders about state of the art memory analysis techniques. We are also committed to developing the most advanced, peer reviewed, scientifically developed techniques to advance the state of the field.

Therefore, the Rekall team often published papers in conferences and journals, as well as other presentations. These pages link to important papers and documents written by the Rekall team.

The Rekall Memory Analysis Site.

To improve the state of memory analysis education and training we have developed a sister project: “The Memory Analysis Course”. This is an open source course, based around the Rekall tool to teach how memory analysis techniques can be applied in practice. You can visit this site at