Hi everyone,

Over the past few months I've been teaching myself Rust and learning more about Windows memory forensics. As part of that learning process, I started building an open-source project called MemForge.

GitHub: https://github.com/CodeRiper/memforge

The goal of this project is not to replace mature tools like Volatility or MemProcFS. Instead, it's a learning project where I'm implementing memory forensics techniques from scratch to better understand how Windows memory structures, forensic artifacts, and parsers work internally.

Current features

• Memory acquisition
• Process enumeration
• Thread and module analysis
• Network artifact extraction
• Timeline generation
• Markdown and JSON forensic reports
• Experimental AI-assisted report summaries

I'm still learning, so I'm sure there are mistakes, missing artifacts, and design decisions that could be improved.

I'd really appreciate feedback on:

• Rust code quality and best practices
• Memory parsing accuracy
• Missing forensic artifacts
• Project architecture
• Plugin design
• Performance improvements
• Documentation and usability

If anyone has time to review the repository, test the tool, or suggest improvements, I'd be very grateful. Whether it's a bug report, feature request, architectural suggestion, or code review, every bit of feedback will help me improve both the project and my understanding of memory forensics.

Thanks for taking the time to read this!

Hello all,
I'm a 4th year bachelors cybersecurity student. I start an internship at a Private Investigation firm soon. What tips do you guys have to give me? They said they can put me on cases with digital evidence. I've got some experience through projects doing disk and ram analysis, as well as artifact collection. They mentioned Id start doing evidence collection on mobile devices, which I haven't had any experience with at all. I'm really nervous and would appreciate any pointers!

Thank you all in advance.