{"adoption": {"forks": 519, "observed_at": "2026-08-28T04:08:41.621982+00:00", "stars": 4300}, "canonical_url": "https://ross.abutalabs.com/products/memprocfs", "card": {"archived": false, "artifact_type": "library", "description": "MemProcFS", "domain": ["security", "reverse-engineering", "developer-tools", "operating-systems"], "enriched": true, "function": ["file-system", "security", "developer-tools"], "health_score": 100, "homepage": null, "language": "C", "license": "AGPL-3.0", "license_family": "copyleft", "maturity": "active", "member_repos": ["ufrisk/MemProcFS"], "name": "ufrisk/MemProcFS", "platform": ["windows", "python", "cpp", "cli"], "pushed_at": "2026-08-25T21:24:30+00:00", "repo": "ufrisk/MemProcFS", "stars": 4300, "tags": ["memory-forensics", "virtual-file-system", "incident-response", "memory-analysis", "pcileech", "live-memory", "memory-dump", "forensics", "linux", "macos"], "topics": [], "urls": [], "use_cases": ["analyze memory dump files as a mounted file system", "perform live memory incident response on a remote machine", "inspect processes and modules from live memory with point-and-click tools", "read and write virtual machine memory from VMware or LiveCloudKd", "acquire memory via PCILeech FPGA hardware", "script memory analysis in Python or PowerShell", "feed memory contents into hex editors, debuggers, or disassemblers"], "what_it_is": "MemProcFS is an memory forensic tool that exposes physical memory, memory dump files, and live memory acquisition sources as files in a virtual file system. It also provides a rich application library (with Python bindings) for programmatic memory analysis and supports remote live incident response via the LeechAgent acquisition agent.", "when_to_avoid": ["you need memory forensics for non-Windows target operating systems with limited support", "you only need simple one-off memory dumps rather than interactive analysis", "you require a purely GUI-based forensic suite with report generation", "hardware-based acquisition via PCILeech FPGA is out of your budget or scope"], "when_to_choose": ["you need to analyze Windows memory dumps or live memory without complex command-line arguments", "you want to use familiar file-based tools (hex editors, scripts, debuggers) on memory", "you need remote live memory acquisition over low-bandwidth connections", "you want programmatic access to memory artifacts via an API for your own tooling"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/memprocfs", "repo": "ufrisk/MemProcFS", "role": "main", "score": 89}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:08:41.621982+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-29T18:21:50.816228+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "309463460528cd6e9082a49ba0e633b1d7fa96a519ed9cf81062abd623490ace", "fetched_at": "2026-08-28T04:08:41.621982+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ufrisk/MemProcFS"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:08:41.621982+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-29T18:21:50.816228+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "309463460528cd6e9082a49ba0e633b1d7fa96a519ed9cf81062abd623490ace", "fetched_at": "2026-08-28T04:08:41.621982+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ufrisk/MemProcFS"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-29T18:21:50.816228+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "309463460528cd6e9082a49ba0e633b1d7fa96a519ed9cf81062abd623490ace", "fetched_at": "2026-08-28T04:08:41.621982+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ufrisk/MemProcFS"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:08:41.621982+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:08:41.621982+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:08:41.621982+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-29T18:21:50.816228+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "309463460528cd6e9082a49ba0e633b1d7fa96a519ed9cf81062abd623490ace", "fetched_at": "2026-08-28T04:08:41.621982+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ufrisk/MemProcFS"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:08:41.621982+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:08:41.621982+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-29T18:21:50.816228+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "309463460528cd6e9082a49ba0e633b1d7fa96a519ed9cf81062abd623490ace", "fetched_at": "2026-08-28T04:08:41.621982+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ufrisk/MemProcFS"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:08:41.621982+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:08:41.621982+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:08:41.621982+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-29T18:21:50.816228+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "309463460528cd6e9082a49ba0e633b1d7fa96a519ed9cf81062abd623490ace", "fetched_at": "2026-08-28T04:08:41.621982+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ufrisk/MemProcFS"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:08:41.621982+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:08:41.621982+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-29T18:21:50.816228+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "309463460528cd6e9082a49ba0e633b1d7fa96a519ed9cf81062abd623490ace", "fetched_at": "2026-08-28T04:08:41.621982+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ufrisk/MemProcFS"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-29T18:21:50.816228+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "309463460528cd6e9082a49ba0e633b1d7fa96a519ed9cf81062abd623490ace", "fetched_at": "2026-08-28T04:08:41.621982+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ufrisk/MemProcFS"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-29T18:21:50.816228+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "309463460528cd6e9082a49ba0e633b1d7fa96a519ed9cf81062abd623490ace", "fetched_at": "2026-08-28T04:08:41.621982+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ufrisk/MemProcFS"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-29T18:21:50.816228+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "309463460528cd6e9082a49ba0e633b1d7fa96a519ed9cf81062abd623490ace", "fetched_at": "2026-08-28T04:08:41.621982+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ufrisk/MemProcFS"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 99, "longevity": 100, "rhythm": 71}, "computed_at": "2026-09-03T02:20:16.233290+00:00", "flags": [], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 2845, "days_push": 8, "days_rel": 39, "gap_med": 122.5, "n_releases_24m": 7}, "score": 89, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}