/A blog where i will randomly post about my projects. 2026-10-03T21:02:11+00:00 Jack Bailey / Jekyll © 2026 Jack Bailey /assets/img/favicons/favicon.ico /assets/img/favicons/favicon-96x96.png 2026-10-03T17:30:00+00:00 2026-10-03T21:01:55+00:00 /posts/Finding-cr3-&-reading-virtual-addresses-for-all-processes-inside-a-QEMU-Windows-Guest/ Jack Bailey

Finding cr3 & reading virtual addresses for all processes inside a QEMU Windows Guest Note: you can view the source code **here* to get a context for all structures referenced. Following on from the last blog post - we were able to create a dump of our windows virtual machine running under QEMU. This successfully targeted the correct memory mapping and dumped both low & high memory ra...

2026-08-27T11:00:00+00:00 2026-08-27T14:38:53+00:00 /posts/Dumping-QEMU-Guest-Memory-&-Analysis-with-volatility/ Jack Bailey

Dumping QEMU Guest Memory & Analysis with volatility At around the end of 2025 i had created a proof of concept memory introspection library written in C. This library provides an API to read the virtual memory of windows executables (both user space & kernel space) whilst dealing with the complex translations of virtual memory to the “physical memory” of a windows guest running under...