Effectiveness of Multiple Memory-Images in detecting Fileless Malware

The proposed work explores the field of memory forensics, utilizing multiple memory images captured from a system across different timestamps for identification and analysis of fileless malware. This method addresses the limitations of traditional single-image memory analysis, proposes the novel multiple memory image analysis for detecting Fileless malware. The results reveal that the use of multiple memory images significantly enhances detection accuracy and reduces false positives, resulting in a more thorough detection of fileless malware.