kernel memory

Depending on the operating system, lsof might be able to grab the name of the file from kernel memory.

As a systems administrator, lsof lets you peer into kernel memory to find out how the system is currently using these files.

Run-time kernel memory patching is one of the strongest techniques for modifying software logic.

This article focuses on Linux kernel memory management and, in particular, the mechanisms provided through slab allocation.

This aptly named tool is essentially a patch to the kernel code that lets hackers access kernel memory and data structures.

In Linux, user memory and kernel memory are independent and implemented in separate address spaces.

Instruct your Windows XP-based computer to create a Small Memory Dump option or Kernel Memory Dump option.

Your best bet is to create (or use) an HIDS that works with executable kernel memory.

Internal to the setup function, there's a call to kzalloc (which allocates kernel memory and zeroes it).

In most cases, a kernel memory dump is sufficient for analysis.

By default, AIX V7. 1 pins kernel memory and includes support to allow applications to pin their kernel stack.

Large Pages for Kernel Memory.

It moves the starting point of kernel memory to 3 GB.

Alternately, you could create an HIDS that works with executable kernel memory instead of files;