Analyzes RAM memory dumps from compromised systems using the Volatility framework to identify malicious processes,