## Module 37 Review
Memory Forensics is the ultimate truth.
*   **Volatility**: The tool.
*   **Injection**: Looking for RWX pages (`malfind`).
*   **Rootkits**: Using Cross-View analysis (`pslist` vs `psscan`) to find hidden threats.

Next: Reverse Engineering (Understanding the code itself).