This talk will look at how we can identify malware infections within a computer's memory. Registry keys, hidden processes, known strings and other indicators can help with the early identification of malware infections, including fileless. The talk will look at reliably locating these structures and providing usable reporting for analysis.