ActivityPub Viewer

A small tool to view real-world ActivityPub objects as JSON! Enter a URL or username from Mastodon or a similar service below, and we'll send a request with the right Accept header to the server to view the underlying object.

Open in browser →
{ "@context": [ "https://www.w3.org/ns/activitystreams", { "ostatus": "http://ostatus.org#", "atomUri": "ostatus:atomUri", "inReplyToAtomUri": "ostatus:inReplyToAtomUri", "conversation": "ostatus:conversation", "sensitive": "as:sensitive", "toot": "http://joinmastodon.org/ns#", "votersCount": "toot:votersCount", "litepub": "http://litepub.social/ns#", "directMessage": "litepub:directMessage", "blurhash": "toot:blurhash", "focalPoint": { "@container": "@list", "@id": "toot:focalPoint" } } ], "id": "https://infosec.exchange/users/UlfFrisk/outbox?min_id=0&page=true", "type": "OrderedCollectionPage", "next": "https://infosec.exchange/users/UlfFrisk/outbox?max_id=109346826852890501&page=true", "prev": "https://infosec.exchange/users/UlfFrisk/outbox?min_id=109813521085507560&page=true", "partOf": "https://infosec.exchange/users/UlfFrisk/outbox", "orderedItems": [ { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109813521085507560/activity", "type": "Create", "actor": "https://infosec.exchange/users/UlfFrisk", "published": "2023-02-05T18:22:34Z", "to": [ "https://www.w3.org/ns/activitystreams#Public" ], "cc": [ "https://infosec.exchange/users/UlfFrisk/followers" ], "object": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109813521085507560", "type": "Note", "summary": null, "inReplyTo": null, "published": "2023-02-05T18:22:34Z", "url": "https://infosec.exchange/@UlfFrisk/109813521085507560", "attributedTo": "https://infosec.exchange/users/UlfFrisk", "to": [ "https://www.w3.org/ns/activitystreams#Public" ], "cc": [ "https://infosec.exchange/users/UlfFrisk/followers" ], "sensitive": false, "atomUri": "https://infosec.exchange/users/UlfFrisk/statuses/109813521085507560", "inReplyToAtomUri": null, "conversation": "tag:infosec.exchange,2023-02-05:objectId=42589159:objectType=Conversation", "content": "<p>Added debug symbol download support (pdbs) to the Linux version of MemProcFS memory forensics! <br /><a href=\"https://github.com/ufrisk/MemProcFS\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" translate=\"no\"><span class=\"invisible\">https://</span><span class=\"\">github.com/ufrisk/MemProcFS</span><span class=\"invisible\"></span></a></p>", "contentMap": { "en": "<p>Added debug symbol download support (pdbs) to the Linux version of MemProcFS memory forensics! <br /><a href=\"https://github.com/ufrisk/MemProcFS\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" translate=\"no\"><span class=\"invisible\">https://</span><span class=\"\">github.com/ufrisk/MemProcFS</span><span class=\"invisible\"></span></a></p>" }, "attachment": [ { "type": "Document", "mediaType": "image/png", "url": "https://media.infosec.exchange/infosec.exchange/media_attachments/files/109/813/520/392/401/216/original/2464106fba79b977.png", "name": null, "blurhash": "U69PsT~CIUNG^Q#-RjNa+^#,t8R*,@wdt7S2", "width": 835, "height": 327 } ], "tag": [], "replies": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109813521085507560/replies", "type": "Collection", "first": { "type": "CollectionPage", "next": "https://infosec.exchange/users/UlfFrisk/statuses/109813521085507560/replies?only_other_accounts=true&page=true", "partOf": "https://infosec.exchange/users/UlfFrisk/statuses/109813521085507560/replies", "items": [] } }, "likes": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109813521085507560/likes", "type": "Collection", "totalItems": 4 }, "shares": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109813521085507560/shares", "type": "Collection", "totalItems": 2 } } }, { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109718112266979244/activity", "type": "Create", "actor": "https://infosec.exchange/users/UlfFrisk", "published": "2023-01-19T21:58:51Z", "to": [ "https://www.w3.org/ns/activitystreams#Public" ], "cc": [ "https://infosec.exchange/users/UlfFrisk/followers" ], "object": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109718112266979244", "type": "Note", "summary": null, "inReplyTo": null, "published": "2023-01-19T21:58:51Z", "url": "https://infosec.exchange/@UlfFrisk/109718112266979244", "attributedTo": "https://infosec.exchange/users/UlfFrisk", "to": [ "https://www.w3.org/ns/activitystreams#Public" ], "cc": [ "https://infosec.exchange/users/UlfFrisk/followers" ], "sensitive": false, "atomUri": "https://infosec.exchange/users/UlfFrisk/statuses/109718112266979244", "inReplyToAtomUri": null, "conversation": "tag:infosec.exchange,2023-01-19:objectId=38595869:objectType=Conversation", "content": "<p>MemProcFS v5.3 released! Fast memory forensics in virtual file system! Now supports Hyper-V (Normal VM, WSL, SandBox, Container, VMware/VirtualBox on Hyper-V, nested VMs), PE version info, and forwarded functions.</p><p><a href=\"https://github.com/ufrisk/MemProcFS\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" translate=\"no\"><span class=\"invisible\">https://</span><span class=\"\">github.com/ufrisk/MemProcFS</span><span class=\"invisible\"></span></a></p>", "contentMap": { "en": "<p>MemProcFS v5.3 released! Fast memory forensics in virtual file system! Now supports Hyper-V (Normal VM, WSL, SandBox, Container, VMware/VirtualBox on Hyper-V, nested VMs), PE version info, and forwarded functions.</p><p><a href=\"https://github.com/ufrisk/MemProcFS\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" translate=\"no\"><span class=\"invisible\">https://</span><span class=\"\">github.com/ufrisk/MemProcFS</span><span class=\"invisible\"></span></a></p>" }, "attachment": [ { "type": "Document", "mediaType": "image/jpeg", "url": "https://media.infosec.exchange/infosec.exchange/media_attachments/files/109/718/104/133/786/741/original/9dc35f0f14aa1f44.jpg", "name": "hyper-v memory forensics.", "blurhash": "UbKn}N$b?Gx^?H~pIVD%=pJEW;RPV=IpxCxa", "focalPoint": [ -0.19, -0.23 ], "width": 1200, "height": 738 }, { "type": "Document", "mediaType": "image/jpeg", "url": "https://media.infosec.exchange/infosec.exchange/media_attachments/files/109/718/104/589/674/591/original/b24aa560ba121ced.jpg", "name": "module version info.", "blurhash": "USP??q009FV?IV9ED%RiIVRjRkj?%M%Mt7of", "focalPoint": [ -0.33, 0 ], "width": 1200, "height": 564 }, { "type": "Document", "mediaType": "image/jpeg", "url": "https://media.infosec.exchange/infosec.exchange/media_attachments/files/109/718/104/822/043/591/original/dfe7f7fcdd771028.jpg", "name": "PE forwarded exported functions.", "blurhash": "UcP??pRjxuoe4nj[WWRj00WBogj[D%j[fkay", "focalPoint": [ 0.25, -0.45 ], "width": 800, "height": 640 } ], "tag": [], "replies": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109718112266979244/replies", "type": "Collection", "first": { "type": "CollectionPage", "next": "https://infosec.exchange/users/UlfFrisk/statuses/109718112266979244/replies?only_other_accounts=true&page=true", "partOf": "https://infosec.exchange/users/UlfFrisk/statuses/109718112266979244/replies", "items": [] } }, "likes": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109718112266979244/likes", "type": "Collection", "totalItems": 11 }, "shares": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109718112266979244/shares", "type": "Collection", "totalItems": 10 } } }, { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109667149087428305/activity", "type": "Announce", "actor": "https://infosec.exchange/users/UlfFrisk", "published": "2023-01-10T21:58:15Z", "to": [ "https://www.w3.org/ns/activitystreams#Public" ], "cc": [ "https://haqueers.com/users/Rairii", "https://infosec.exchange/users/UlfFrisk/followers" ], "object": "https://haqueers.com/users/Rairii/statuses/109666516751499118" }, { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109621666966202615/activity", "type": "Announce", "actor": "https://infosec.exchange/users/UlfFrisk", "published": "2023-01-02T21:11:32Z", "to": [ "https://www.w3.org/ns/activitystreams#Public" ], "cc": [ "https://infosec.exchange/users/eric_capuano", "https://infosec.exchange/users/UlfFrisk/followers" ], "object": "https://infosec.exchange/users/eric_capuano/statuses/109616911807727673" }, { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109544748886780842/activity", "type": "Announce", "actor": "https://infosec.exchange/users/UlfFrisk", "published": "2022-12-20T07:10:16Z", "to": [ "https://www.w3.org/ns/activitystreams#Public" ], "cc": [ "https://mastodon.social/users/MattBinder", "https://infosec.exchange/users/UlfFrisk/followers" ], "object": "https://mastodon.social/users/MattBinder/statuses/109541618359679777" }, { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109542534804947681/activity", "type": "Create", "actor": "https://infosec.exchange/users/UlfFrisk", "published": "2022-12-19T21:47:11Z", "to": [ "https://www.w3.org/ns/activitystreams#Public" ], "cc": [ "https://infosec.exchange/users/UlfFrisk/followers", "https://infosec.exchange/users/Dmaynor" ], "object": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109542534804947681", "type": "Note", "summary": null, "inReplyTo": "https://infosec.exchange/users/Dmaynor/statuses/109542252590324831", "published": "2022-12-19T21:47:11Z", "url": "https://infosec.exchange/@UlfFrisk/109542534804947681", "attributedTo": "https://infosec.exchange/users/UlfFrisk", "to": [ "https://www.w3.org/ns/activitystreams#Public" ], "cc": [ "https://infosec.exchange/users/UlfFrisk/followers", "https://infosec.exchange/users/Dmaynor" ], "sensitive": false, "atomUri": "https://infosec.exchange/users/UlfFrisk/statuses/109542534804947681", "inReplyToAtomUri": "https://infosec.exchange/users/Dmaynor/statuses/109542252590324831", "conversation": "tag:infosec.exchange,2022-12-19:objectId=30535879:objectType=Conversation", "content": "<p><span class=\"h-card\" translate=\"no\"><a href=\"https://infosec.exchange/@Dmaynor\" class=\"u-url mention\">@<span>Dmaynor</span></a></span> enigma-x1.com have them on sale. I got mine for free though 😀​</p>", "contentMap": { "en": "<p><span class=\"h-card\" translate=\"no\"><a href=\"https://infosec.exchange/@Dmaynor\" class=\"u-url mention\">@<span>Dmaynor</span></a></span> enigma-x1.com have them on sale. I got mine for free though 😀​</p>" }, "attachment": [], "tag": [ { "type": "Mention", "href": "https://infosec.exchange/users/Dmaynor", "name": "@Dmaynor" } ], "replies": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109542534804947681/replies", "type": "Collection", "first": { "type": "CollectionPage", "next": "https://infosec.exchange/users/UlfFrisk/statuses/109542534804947681/replies?only_other_accounts=true&page=true", "partOf": "https://infosec.exchange/users/UlfFrisk/statuses/109542534804947681/replies", "items": [] } }, "likes": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109542534804947681/likes", "type": "Collection", "totalItems": 0 }, "shares": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109542534804947681/shares", "type": "Collection", "totalItems": 0 } } }, { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109542528891786106/activity", "type": "Create", "actor": "https://infosec.exchange/users/UlfFrisk", "published": "2022-12-19T21:45:41Z", "to": [ "https://www.w3.org/ns/activitystreams#Public" ], "cc": [ "https://infosec.exchange/users/UlfFrisk/followers", "https://infosec.exchange/users/Dmaynor" ], "object": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109542528891786106", "type": "Note", "summary": null, "inReplyTo": "https://infosec.exchange/users/Dmaynor/statuses/109542252590324831", "published": "2022-12-19T21:45:41Z", "url": "https://infosec.exchange/@UlfFrisk/109542528891786106", "attributedTo": "https://infosec.exchange/users/UlfFrisk", "to": [ "https://www.w3.org/ns/activitystreams#Public" ], "cc": [ "https://infosec.exchange/users/UlfFrisk/followers", "https://infosec.exchange/users/Dmaynor" ], "sensitive": false, "atomUri": "https://infosec.exchange/users/UlfFrisk/statuses/109542528891786106", "inReplyToAtomUri": "https://infosec.exchange/users/Dmaynor/statuses/109542252590324831", "conversation": "tag:infosec.exchange,2022-12-19:objectId=30535879:objectType=Conversation", "content": "<p><span class=\"h-card\" translate=\"no\"><a href=\"https://infosec.exchange/@Dmaynor\" class=\"u-url mention\">@<span>Dmaynor</span></a></span> It&#39;s a good board. I like it. It&#39;s very similar to the Screamer and DMANinja boards.</p>", "contentMap": { "en": "<p><span class=\"h-card\" translate=\"no\"><a href=\"https://infosec.exchange/@Dmaynor\" class=\"u-url mention\">@<span>Dmaynor</span></a></span> It&#39;s a good board. I like it. It&#39;s very similar to the Screamer and DMANinja boards.</p>" }, "attachment": [], "tag": [ { "type": "Mention", "href": "https://infosec.exchange/users/Dmaynor", "name": "@Dmaynor" } ], "replies": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109542528891786106/replies", "type": "Collection", "first": { "type": "CollectionPage", "next": "https://infosec.exchange/users/UlfFrisk/statuses/109542528891786106/replies?only_other_accounts=true&page=true", "partOf": "https://infosec.exchange/users/UlfFrisk/statuses/109542528891786106/replies", "items": [] } }, "likes": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109542528891786106/likes", "type": "Collection", "totalItems": 0 }, "shares": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109542528891786106/shares", "type": "Collection", "totalItems": 0 } } }, { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109541984004995780/activity", "type": "Create", "actor": "https://infosec.exchange/users/UlfFrisk", "published": "2022-12-19T19:27:07Z", "to": [ "https://www.w3.org/ns/activitystreams#Public" ], "cc": [ "https://infosec.exchange/users/UlfFrisk/followers" ], "object": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109541984004995780", "type": "Note", "summary": null, "inReplyTo": null, "published": "2022-12-19T19:27:07Z", "url": "https://infosec.exchange/@UlfFrisk/109541984004995780", "attributedTo": "https://infosec.exchange/users/UlfFrisk", "to": [ "https://www.w3.org/ns/activitystreams#Public" ], "cc": [ "https://infosec.exchange/users/UlfFrisk/followers" ], "sensitive": false, "atomUri": "https://infosec.exchange/users/UlfFrisk/statuses/109541984004995780", "inReplyToAtomUri": null, "conversation": "tag:infosec.exchange,2022-12-19:objectId=30535879:objectType=Conversation", "content": "<p>Got myself a LeetDMA DMA attack board today 😈</p><p>Decent memory dump speed as well!</p><p>Thank you enigma-x1.com for sponsoring 💖</p>", "contentMap": { "en": "<p>Got myself a LeetDMA DMA attack board today 😈</p><p>Decent memory dump speed as well!</p><p>Thank you enigma-x1.com for sponsoring 💖</p>" }, "attachment": [ { "type": "Document", "mediaType": "image/jpeg", "url": "https://media.infosec.exchange/infosec.exchange/media_attachments/files/109/541/980/017/107/208/original/c32a046a1ebaa885.jpg", "name": "LeetDMA FPGA board", "blurhash": "UHB|88RODht7ITt7xbNGDgW=kYt7x_WBskjr", "focalPoint": [ 0.09, -0.15 ], "width": 1200, "height": 807 }, { "type": "Document", "mediaType": "image/png", "url": "https://media.infosec.exchange/infosec.exchange/media_attachments/files/109/541/980/225/620/329/original/abd47ecdc5f80f15.png", "name": "PCILeech memory dump", "blurhash": "ULATi,xuWBay~qoffQWB_3j[j[WB_3ofWBWB", "focalPoint": [ -0.16, -0.32 ], "width": 501, "height": 440 } ], "tag": [], "replies": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109541984004995780/replies", "type": "Collection", "first": { "type": "CollectionPage", "next": "https://infosec.exchange/users/UlfFrisk/statuses/109541984004995780/replies?only_other_accounts=true&page=true", "partOf": "https://infosec.exchange/users/UlfFrisk/statuses/109541984004995780/replies", "items": [] } }, "likes": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109541984004995780/likes", "type": "Collection", "totalItems": 9 }, "shares": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109541984004995780/shares", "type": "Collection", "totalItems": 3 } } }, { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109495035783766019/activity", "type": "Announce", "actor": "https://infosec.exchange/users/UlfFrisk", "published": "2022-12-11T12:27:34Z", "to": [ "https://www.w3.org/ns/activitystreams#Public" ], "cc": [ "https://mastodon.gamedev.place/users/TomF", "https://infosec.exchange/users/UlfFrisk/followers" ], "object": "https://mastodon.gamedev.place/users/TomF/statuses/109490929653596042" }, { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109489679140541096/activity", "type": "Announce", "actor": "https://infosec.exchange/users/UlfFrisk", "published": "2022-12-10T13:45:18Z", "to": [ "https://www.w3.org/ns/activitystreams#Public" ], "cc": [ "https://infosec.exchange/users/eric_capuano", "https://infosec.exchange/users/UlfFrisk/followers" ], "object": "https://infosec.exchange/users/eric_capuano/statuses/109480592777471192" }, { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109420442461288522/activity", "type": "Create", "actor": "https://infosec.exchange/users/UlfFrisk", "published": "2022-11-28T08:17:30Z", "to": [ "https://www.w3.org/ns/activitystreams#Public" ], "cc": [ "https://infosec.exchange/users/UlfFrisk/followers", "https://social.data.coop/users/kimschulz" ], "object": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109420442461288522", "type": "Note", "summary": null, "inReplyTo": "https://infosec.exchange/users/UlfFrisk/statuses/109420428935246615", "published": "2022-11-28T08:17:30Z", "url": "https://infosec.exchange/@UlfFrisk/109420442461288522", "attributedTo": "https://infosec.exchange/users/UlfFrisk", "to": [ "https://www.w3.org/ns/activitystreams#Public" ], "cc": [ "https://infosec.exchange/users/UlfFrisk/followers", "https://social.data.coop/users/kimschulz" ], "sensitive": false, "atomUri": "https://infosec.exchange/users/UlfFrisk/statuses/109420442461288522", "inReplyToAtomUri": "https://infosec.exchange/users/UlfFrisk/statuses/109420428935246615", "conversation": "tag:infosec.exchange,2022-11-28:objectId=24929332:objectType=Conversation", "content": "<p><span class=\"h-card\" translate=\"no\"><a href=\"https://social.data.coop/@kimschulz\" class=\"u-url mention\">@<span>kimschulz</span></a></span> and yes, if you just wish to use the Python API there is a &quot;pip install memprocfs&quot; as well :)</p>", "contentMap": { "en": "<p><span class=\"h-card\" translate=\"no\"><a href=\"https://social.data.coop/@kimschulz\" class=\"u-url mention\">@<span>kimschulz</span></a></span> and yes, if you just wish to use the Python API there is a &quot;pip install memprocfs&quot; as well :)</p>" }, "attachment": [], "tag": [ { "type": "Mention", "href": "https://social.data.coop/users/kimschulz", "name": "@kimschulz@social.data.coop" } ], "replies": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109420442461288522/replies", "type": "Collection", "first": { "type": "CollectionPage", "next": "https://infosec.exchange/users/UlfFrisk/statuses/109420442461288522/replies?only_other_accounts=true&page=true", "partOf": "https://infosec.exchange/users/UlfFrisk/statuses/109420442461288522/replies", "items": [] } }, "likes": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109420442461288522/likes", "type": "Collection", "totalItems": 0 }, "shares": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109420442461288522/shares", "type": "Collection", "totalItems": 0 } } }, { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109420428935246615/activity", "type": "Create", "actor": "https://infosec.exchange/users/UlfFrisk", "published": "2022-11-28T08:14:04Z", "to": [ "https://www.w3.org/ns/activitystreams#Public" ], "cc": [ "https://infosec.exchange/users/UlfFrisk/followers", "https://social.data.coop/users/kimschulz" ], "object": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109420428935246615", "type": "Note", "summary": null, "inReplyTo": "https://social.data.coop/users/kimschulz/statuses/109420324391360587", "published": "2022-11-28T08:14:04Z", "url": "https://infosec.exchange/@UlfFrisk/109420428935246615", "attributedTo": "https://infosec.exchange/users/UlfFrisk", "to": [ "https://www.w3.org/ns/activitystreams#Public" ], "cc": [ "https://infosec.exchange/users/UlfFrisk/followers", "https://social.data.coop/users/kimschulz" ], "sensitive": false, "atomUri": "https://infosec.exchange/users/UlfFrisk/statuses/109420428935246615", "inReplyToAtomUri": "https://social.data.coop/users/kimschulz/statuses/109420324391360587", "conversation": "tag:infosec.exchange,2022-11-28:objectId=24929332:objectType=Conversation", "content": "<p><span class=\"h-card\" translate=\"no\"><a href=\"https://social.data.coop/@kimschulz\" class=\"u-url mention\">@<span>kimschulz</span></a></span> Please find the Python API documentation at: <a href=\"https://github.com/ufrisk/MemProcFS/wiki/API_Python\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" translate=\"no\"><span class=\"invisible\">https://</span><span class=\"ellipsis\">github.com/ufrisk/MemProcFS/wi</span><span class=\"invisible\">ki/API_Python</span></a> and some info about how to build your own plugin at <a href=\"https://github.com/ufrisk/MemProcFS/wiki/Dev_Python\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" translate=\"no\"><span class=\"invisible\">https://</span><span class=\"ellipsis\">github.com/ufrisk/MemProcFS/wi</span><span class=\"invisible\">ki/Dev_Python</span></a></p><p>There are two kinds of plugins, one &quot;light&quot; which is super convenient if doing a fast analysis task and a &quot;standard&quot; plugin which will require some more work but are useful in more advanced situations.</p><p>Also, there are some examples in the &quot;plugin&quot; folder.</p><p>Please let me know if anything should be unclear or if you feel anything should be missing from the Python API.</p>", "contentMap": { "en": "<p><span class=\"h-card\" translate=\"no\"><a href=\"https://social.data.coop/@kimschulz\" class=\"u-url mention\">@<span>kimschulz</span></a></span> Please find the Python API documentation at: <a href=\"https://github.com/ufrisk/MemProcFS/wiki/API_Python\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" translate=\"no\"><span class=\"invisible\">https://</span><span class=\"ellipsis\">github.com/ufrisk/MemProcFS/wi</span><span class=\"invisible\">ki/API_Python</span></a> and some info about how to build your own plugin at <a href=\"https://github.com/ufrisk/MemProcFS/wiki/Dev_Python\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" translate=\"no\"><span class=\"invisible\">https://</span><span class=\"ellipsis\">github.com/ufrisk/MemProcFS/wi</span><span class=\"invisible\">ki/Dev_Python</span></a></p><p>There are two kinds of plugins, one &quot;light&quot; which is super convenient if doing a fast analysis task and a &quot;standard&quot; plugin which will require some more work but are useful in more advanced situations.</p><p>Also, there are some examples in the &quot;plugin&quot; folder.</p><p>Please let me know if anything should be unclear or if you feel anything should be missing from the Python API.</p>" }, "attachment": [], "tag": [ { "type": "Mention", "href": "https://social.data.coop/users/kimschulz", "name": "@kimschulz@social.data.coop" } ], "replies": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109420428935246615/replies", "type": "Collection", "first": { "type": "CollectionPage", "next": "https://infosec.exchange/users/UlfFrisk/statuses/109420428935246615/replies?min_id=109420442461288522&page=true", "partOf": "https://infosec.exchange/users/UlfFrisk/statuses/109420428935246615/replies", "items": [ "https://infosec.exchange/users/UlfFrisk/statuses/109420442461288522" ] } }, "likes": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109420428935246615/likes", "type": "Collection", "totalItems": 1 }, "shares": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109420428935246615/shares", "type": "Collection", "totalItems": 0 } } }, { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109420247448216044/activity", "type": "Create", "actor": "https://infosec.exchange/users/UlfFrisk", "published": "2022-11-28T07:27:54Z", "to": [ "https://www.w3.org/ns/activitystreams#Public" ], "cc": [ "https://infosec.exchange/users/UlfFrisk/followers" ], "object": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109420247448216044", "type": "Note", "summary": null, "inReplyTo": "https://infosec.exchange/users/UlfFrisk/statuses/109420246308537006", "published": "2022-11-28T07:27:54Z", "url": "https://infosec.exchange/@UlfFrisk/109420247448216044", "attributedTo": "https://infosec.exchange/users/UlfFrisk", "to": [ "https://www.w3.org/ns/activitystreams#Public" ], "cc": [ "https://infosec.exchange/users/UlfFrisk/followers" ], "sensitive": false, "atomUri": "https://infosec.exchange/users/UlfFrisk/statuses/109420247448216044", "inReplyToAtomUri": "https://infosec.exchange/users/UlfFrisk/statuses/109420246308537006", "conversation": "tag:infosec.exchange,2022-11-28:objectId=24929332:objectType=Conversation", "content": "<p>Run MemProcFS memory forensics in command-line batch mode (without mounting the virtual file system) by running a small user-defined Python program!</p>", "contentMap": { "en": "<p>Run MemProcFS memory forensics in command-line batch mode (without mounting the virtual file system) by running a small user-defined Python program!</p>" }, "attachment": [ { "type": "Document", "mediaType": "image/png", "url": "https://media.infosec.exchange/infosec.exchange/media_attachments/files/109/420/247/380/652/967/original/16fd4cc9879578b1.png", "name": null, "blurhash": "UF8zu,s:R*ay~WaeWoWV~Wj[S2ay~WayR*ay", "width": 1159, "height": 646 } ], "tag": [], "replies": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109420247448216044/replies", "type": "Collection", "first": { "type": "CollectionPage", "next": "https://infosec.exchange/users/UlfFrisk/statuses/109420247448216044/replies?only_other_accounts=true&page=true", "partOf": "https://infosec.exchange/users/UlfFrisk/statuses/109420247448216044/replies", "items": [] } }, "likes": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109420247448216044/likes", "type": "Collection", "totalItems": 10 }, "shares": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109420247448216044/shares", "type": "Collection", "totalItems": 5 } } }, { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109420246308537006/activity", "type": "Create", "actor": "https://infosec.exchange/users/UlfFrisk", "published": "2022-11-28T07:27:37Z", "to": [ "https://www.w3.org/ns/activitystreams#Public" ], "cc": [ "https://infosec.exchange/users/UlfFrisk/followers" ], "object": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109420246308537006", "type": "Note", "summary": null, "inReplyTo": "https://infosec.exchange/users/UlfFrisk/statuses/109420243826901538", "published": "2022-11-28T07:27:37Z", "url": "https://infosec.exchange/@UlfFrisk/109420246308537006", "attributedTo": "https://infosec.exchange/users/UlfFrisk", "to": [ "https://www.w3.org/ns/activitystreams#Public" ], "cc": [ "https://infosec.exchange/users/UlfFrisk/followers" ], "sensitive": false, "atomUri": "https://infosec.exchange/users/UlfFrisk/statuses/109420246308537006", "inReplyToAtomUri": "https://infosec.exchange/users/UlfFrisk/statuses/109420243826901538", "conversation": "tag:infosec.exchange,2022-11-28:objectId=24929332:objectType=Conversation", "content": "<p>Coding your MemProcFS memory forensics Python plugin is as easy as saving &quot;print(&#39;hello from my first plugin&#39;)&quot; to a correctly named python file in the MemProcFS plugins directory!</p>", "contentMap": { "en": "<p>Coding your MemProcFS memory forensics Python plugin is as easy as saving &quot;print(&#39;hello from my first plugin&#39;)&quot; to a correctly named python file in the MemProcFS plugins directory!</p>" }, "attachment": [ { "type": "Document", "mediaType": "image/png", "url": "https://media.infosec.exchange/infosec.exchange/media_attachments/files/109/420/245/433/061/493/original/ae73297386ca53de.png", "name": null, "blurhash": "UeD]MM9FR*xu~q9FRkxa?bIUWVt7t7V@kCkC", "width": 1200, "height": 566 } ], "tag": [], "replies": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109420246308537006/replies", "type": "Collection", "first": { "type": "CollectionPage", "next": "https://infosec.exchange/users/UlfFrisk/statuses/109420246308537006/replies?min_id=109420247448216044&page=true", "partOf": "https://infosec.exchange/users/UlfFrisk/statuses/109420246308537006/replies", "items": [ "https://infosec.exchange/users/UlfFrisk/statuses/109420247448216044" ] } }, "likes": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109420246308537006/likes", "type": "Collection", "totalItems": 2 }, "shares": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109420246308537006/shares", "type": "Collection", "totalItems": 0 } } }, { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109420243826901538/activity", "type": "Create", "actor": "https://infosec.exchange/users/UlfFrisk", "published": "2022-11-28T07:26:59Z", "to": [ "https://www.w3.org/ns/activitystreams#Public" ], "cc": [ "https://infosec.exchange/users/UlfFrisk/followers" ], "object": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109420243826901538", "type": "Note", "summary": null, "inReplyTo": null, "published": "2022-11-28T07:26:59Z", "url": "https://infosec.exchange/@UlfFrisk/109420243826901538", "attributedTo": "https://infosec.exchange/users/UlfFrisk", "to": [ "https://www.w3.org/ns/activitystreams#Public" ], "cc": [ "https://infosec.exchange/users/UlfFrisk/followers" ], "sensitive": false, "atomUri": "https://infosec.exchange/users/UlfFrisk/statuses/109420243826901538", "inReplyToAtomUri": null, "conversation": "tag:infosec.exchange,2022-11-28:objectId=24929332:objectType=Conversation", "content": "<p>MemProcFS super fast memory analysis and forensics now supports Python plugins also on Linux and command-line batch mode!<br /><a href=\"https://github.com/ufrisk/MemProcFS\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" translate=\"no\"><span class=\"invisible\">https://</span><span class=\"\">github.com/ufrisk/MemProcFS</span><span class=\"invisible\"></span></a></p>", "contentMap": { "en": "<p>MemProcFS super fast memory analysis and forensics now supports Python plugins also on Linux and command-line batch mode!<br /><a href=\"https://github.com/ufrisk/MemProcFS\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" translate=\"no\"><span class=\"invisible\">https://</span><span class=\"\">github.com/ufrisk/MemProcFS</span><span class=\"invisible\"></span></a></p>" }, "attachment": [ { "type": "Document", "mediaType": "image/png", "url": "https://media.infosec.exchange/infosec.exchange/media_attachments/files/109/420/243/581/145/365/original/356262e79d67f654.png", "name": null, "blurhash": "UeD]MM9FR*xu~q9FRkxa?bIUWVt7t7V@kCkC", "width": 1200, "height": 566 }, { "type": "Document", "mediaType": "image/png", "url": "https://media.infosec.exchange/infosec.exchange/media_attachments/files/109/420/243/730/353/956/original/6ceb3083592d8717.png", "name": null, "blurhash": "UF8zu,s:R*ay~WaeWoWV~Wj[S2ay~WayR*ay", "width": 1159, "height": 646 } ], "tag": [], "replies": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109420243826901538/replies", "type": "Collection", "first": { "type": "CollectionPage", "next": "https://infosec.exchange/users/UlfFrisk/statuses/109420243826901538/replies?min_id=109420246308537006&page=true", "partOf": "https://infosec.exchange/users/UlfFrisk/statuses/109420243826901538/replies", "items": [ "https://infosec.exchange/users/UlfFrisk/statuses/109420246308537006" ] } }, "likes": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109420243826901538/likes", "type": "Collection", "totalItems": 27 }, "shares": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109420243826901538/shares", "type": "Collection", "totalItems": 22 } } }, { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109352276823410381/activity", "type": "Create", "actor": "https://infosec.exchange/users/UlfFrisk", "published": "2022-11-16T07:22:05Z", "to": [ "https://www.w3.org/ns/activitystreams#Public" ], "cc": [ "https://infosec.exchange/users/UlfFrisk/followers" ], "object": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109352276823410381", "type": "Note", "summary": null, "inReplyTo": null, "published": "2022-11-16T07:22:05Z", "url": "https://infosec.exchange/@UlfFrisk/109352276823410381", "attributedTo": "https://infosec.exchange/users/UlfFrisk", "to": [ "https://www.w3.org/ns/activitystreams#Public" ], "cc": [ "https://infosec.exchange/users/UlfFrisk/followers" ], "sensitive": false, "atomUri": "https://infosec.exchange/users/UlfFrisk/statuses/109352276823410381", "inReplyToAtomUri": null, "conversation": "tag:infosec.exchange,2022-11-16:objectId=21807817:objectType=Conversation", "content": "<p>MemProcFS v5.2 now supports analysis of Virtual Machines 😀<br />MemProcFS - super easy memory analysis and forensics in a virtual file system!<br /><a href=\"https://github.com/ufrisk/MemProcFS\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" translate=\"no\"><span class=\"invisible\">https://</span><span class=\"\">github.com/ufrisk/MemProcFS</span><span class=\"invisible\"></span></a></p><p>Been working on this for a while. An important memory forensics feature for the future as Windows focus more on virtualization (WSL2 etc). VMs show up as child MemProcFS&#39;es under /vm. You&#39;d need to enable with -vm startup option. Works great on both live memory and memory dump files!</p><p>More info at: <a href=\"https://github.com/ufrisk/MemProcFS/wiki/VM\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" translate=\"no\"><span class=\"invisible\">https://</span><span class=\"ellipsis\">github.com/ufrisk/MemProcFS/wi</span><span class=\"invisible\">ki/VM</span></a></p><p>Also huge thanks to gerhart_x for the awesome Hyper-V research at <a href=\"https://hvinternals.blogspot.com/\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" translate=\"no\"><span class=\"invisible\">https://</span><span class=\"\">hvinternals.blogspot.com/</span><span class=\"invisible\"></span></a> making this possible!</p>", "contentMap": { "en": "<p>MemProcFS v5.2 now supports analysis of Virtual Machines 😀<br />MemProcFS - super easy memory analysis and forensics in a virtual file system!<br /><a href=\"https://github.com/ufrisk/MemProcFS\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" translate=\"no\"><span class=\"invisible\">https://</span><span class=\"\">github.com/ufrisk/MemProcFS</span><span class=\"invisible\"></span></a></p><p>Been working on this for a while. An important memory forensics feature for the future as Windows focus more on virtualization (WSL2 etc). VMs show up as child MemProcFS&#39;es under /vm. You&#39;d need to enable with -vm startup option. Works great on both live memory and memory dump files!</p><p>More info at: <a href=\"https://github.com/ufrisk/MemProcFS/wiki/VM\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" translate=\"no\"><span class=\"invisible\">https://</span><span class=\"ellipsis\">github.com/ufrisk/MemProcFS/wi</span><span class=\"invisible\">ki/VM</span></a></p><p>Also huge thanks to gerhart_x for the awesome Hyper-V research at <a href=\"https://hvinternals.blogspot.com/\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" translate=\"no\"><span class=\"invisible\">https://</span><span class=\"\">hvinternals.blogspot.com/</span><span class=\"invisible\"></span></a> making this possible!</p>" }, "attachment": [ { "type": "Document", "mediaType": "image/png", "url": "https://media.infosec.exchange/infosec.exchange/media_attachments/files/109/352/274/733/558/885/original/929c2de10ce3d33f.png", "name": null, "blurhash": "UhP6~y4Tog%M009FflxuM|oJbHf6%M-:a#Rj", "width": 1433, "height": 1069 } ], "tag": [], "replies": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109352276823410381/replies", "type": "Collection", "first": { "type": "CollectionPage", "next": "https://infosec.exchange/users/UlfFrisk/statuses/109352276823410381/replies?only_other_accounts=true&page=true", "partOf": "https://infosec.exchange/users/UlfFrisk/statuses/109352276823410381/replies", "items": [] } }, "likes": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109352276823410381/likes", "type": "Collection", "totalItems": 28 }, "shares": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109352276823410381/shares", "type": "Collection", "totalItems": 22 } } }, { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109349946206836245/activity", "type": "Create", "actor": "https://infosec.exchange/users/UlfFrisk", "published": "2022-11-15T21:29:23Z", "to": [ "https://www.w3.org/ns/activitystreams#Public" ], "cc": [ "https://infosec.exchange/users/UlfFrisk/followers", "https://infosec.exchange/users/spiffy" ], "object": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109349946206836245", "type": "Note", "summary": null, "inReplyTo": "https://infosec.exchange/users/spiffy/statuses/109346979717009877", "published": "2022-11-15T21:29:23Z", "url": "https://infosec.exchange/@UlfFrisk/109349946206836245", "attributedTo": "https://infosec.exchange/users/UlfFrisk", "to": [ "https://www.w3.org/ns/activitystreams#Public" ], "cc": [ "https://infosec.exchange/users/UlfFrisk/followers", "https://infosec.exchange/users/spiffy" ], "sensitive": false, "atomUri": "https://infosec.exchange/users/UlfFrisk/statuses/109349946206836245", "inReplyToAtomUri": "https://infosec.exchange/users/spiffy/statuses/109346979717009877", "conversation": "tag:infosec.exchange,2022-11-15:objectId=21618617:objectType=Conversation", "content": "<p><span class=\"h-card\" translate=\"no\"><a href=\"https://infosec.exchange/@spiffy\" class=\"u-url mention\">@<span>spiffy</span></a></span> makes me super happy 😊, have another very nice feature I hope to release later this week. I think this will be good!</p>", "contentMap": { "en": "<p><span class=\"h-card\" translate=\"no\"><a href=\"https://infosec.exchange/@spiffy\" class=\"u-url mention\">@<span>spiffy</span></a></span> makes me super happy 😊, have another very nice feature I hope to release later this week. I think this will be good!</p>" }, "attachment": [], "tag": [ { "type": "Mention", "href": "https://infosec.exchange/users/spiffy", "name": "@spiffy" } ], "replies": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109349946206836245/replies", "type": "Collection", "first": { "type": "CollectionPage", "next": "https://infosec.exchange/users/UlfFrisk/statuses/109349946206836245/replies?only_other_accounts=true&page=true", "partOf": "https://infosec.exchange/users/UlfFrisk/statuses/109349946206836245/replies", "items": [] } }, "likes": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109349946206836245/likes", "type": "Collection", "totalItems": 0 }, "shares": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109349946206836245/shares", "type": "Collection", "totalItems": 0 } } }, { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109349938825904096/activity", "type": "Create", "actor": "https://infosec.exchange/users/UlfFrisk", "published": "2022-11-15T21:27:30Z", "to": [ "https://www.w3.org/ns/activitystreams#Public" ], "cc": [ "https://infosec.exchange/users/UlfFrisk/followers" ], "object": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109349938825904096", "type": "Note", "summary": null, "inReplyTo": "https://infosec.exchange/users/b1n2h3x/statuses/109349633055858278", "published": "2022-11-15T21:27:30Z", "url": "https://infosec.exchange/@UlfFrisk/109349938825904096", "attributedTo": "https://infosec.exchange/users/UlfFrisk", "to": [ "https://www.w3.org/ns/activitystreams#Public" ], "cc": [ "https://infosec.exchange/users/UlfFrisk/followers" ], "sensitive": false, "atomUri": "https://infosec.exchange/users/UlfFrisk/statuses/109349938825904096", "inReplyToAtomUri": "https://infosec.exchange/users/b1n2h3x/statuses/109349633055858278", "conversation": "tag:infosec.exchange,2022-11-15:objectId=21618617:objectType=Conversation", "content": "<p>Huge thanks 😊<br />And I hope to release a very nice feature I&#39;ve been working on for quite a while very soon...</p>", "contentMap": { "en": "<p>Huge thanks 😊<br />And I hope to release a very nice feature I&#39;ve been working on for quite a while very soon...</p>" }, "attachment": [], "tag": [], "replies": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109349938825904096/replies", "type": "Collection", "first": { "type": "CollectionPage", "next": "https://infosec.exchange/users/UlfFrisk/statuses/109349938825904096/replies?only_other_accounts=true&page=true", "partOf": "https://infosec.exchange/users/UlfFrisk/statuses/109349938825904096/replies", "items": [] } }, "likes": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109349938825904096/likes", "type": "Collection", "totalItems": 0 }, "shares": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109349938825904096/shares", "type": "Collection", "totalItems": 0 } } }, { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109349096163146382/activity", "type": "Announce", "actor": "https://infosec.exchange/users/UlfFrisk", "published": "2022-11-15T17:53:12Z", "to": [ "https://www.w3.org/ns/activitystreams#Public" ], "cc": [ "https://infosec.exchange/users/yarden_shafir", "https://infosec.exchange/users/UlfFrisk/followers" ], "object": "https://infosec.exchange/users/yarden_shafir/statuses/109349076991622477" }, { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109346826852890501/activity", "type": "Create", "actor": "https://infosec.exchange/users/UlfFrisk", "published": "2022-11-15T08:16:05Z", "to": [ "https://www.w3.org/ns/activitystreams#Public" ], "cc": [ "https://infosec.exchange/users/UlfFrisk/followers" ], "object": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109346826852890501", "type": "Note", "summary": null, "inReplyTo": null, "published": "2022-11-15T08:16:05Z", "url": "https://infosec.exchange/@UlfFrisk/109346826852890501", "attributedTo": "https://infosec.exchange/users/UlfFrisk", "to": [ "https://www.w3.org/ns/activitystreams#Public" ], "cc": [ "https://infosec.exchange/users/UlfFrisk/followers" ], "sensitive": false, "atomUri": "https://infosec.exchange/users/UlfFrisk/statuses/109346826852890501", "inReplyToAtomUri": null, "conversation": "tag:infosec.exchange,2022-11-15:objectId=21618617:objectType=Conversation", "content": "<p>It&#39;s super nice to see the forensics community is picking up on MemProcFS memory forensics!</p><p>First SANS FOR508 and now FOR532 😀</p><p><a href=\"https://www.sans.org/cyber-security-courses/enterprise-memory-forensics-in-depth/\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" translate=\"no\"><span class=\"invisible\">https://www.</span><span class=\"ellipsis\">sans.org/cyber-security-course</span><span class=\"invisible\">s/enterprise-memory-forensics-in-depth/</span></a></p>", "contentMap": { "en": "<p>It&#39;s super nice to see the forensics community is picking up on MemProcFS memory forensics!</p><p>First SANS FOR508 and now FOR532 😀</p><p><a href=\"https://www.sans.org/cyber-security-courses/enterprise-memory-forensics-in-depth/\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" translate=\"no\"><span class=\"invisible\">https://www.</span><span class=\"ellipsis\">sans.org/cyber-security-course</span><span class=\"invisible\">s/enterprise-memory-forensics-in-depth/</span></a></p>" }, "attachment": [], "tag": [], "replies": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109346826852890501/replies", "type": "Collection", "first": { "type": "CollectionPage", "next": "https://infosec.exchange/users/UlfFrisk/statuses/109346826852890501/replies?only_other_accounts=true&page=true", "partOf": "https://infosec.exchange/users/UlfFrisk/statuses/109346826852890501/replies", "items": [] } }, "likes": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109346826852890501/likes", "type": "Collection", "totalItems": 15 }, "shares": { "id": "https://infosec.exchange/users/UlfFrisk/statuses/109346826852890501/shares", "type": "Collection", "totalItems": 6 } } } ] }