ParentFull threadjeffmcjunkin·Exactly this. Much like the Volatility Framework's psscan[1] module.[1] https://github.com/volatilityfoundation/volatility/wiki/Comm...View on HN