← Memory Forensics — Advanced Volatility, Rootkits, and Credential Extraction

Module Quiz

10 questions · Pass at 80%

Question 1 of 10

Volatility windows.pslist returns 82 processes. windows.psscan returns 89 processes. Several PIDs appear in psscan but not in pslist, with ExitTime = 0. What does this finding indicate?