drop volatility dlllist or ldrmodules or malfind output · detect injected dlls and module anomalies · suspicious paths · cross-plugin correlation · runs locally
volatility output
drop dlllist / ldrmodules / malfind
or click
drop volatility dlllist · ldrmodules · malfind output