drop memory dump · scan for NOP sleds · repeated 4KB blocks · shellcode prefixes · identical byte runs · density map · csv · runs locally
drop raw memory dump · chunked scan