The labs study modern mobile operating systems, analyze advanced techniques, and develop methods for understanding system behavior at the lowest levels of modern platforms.
Some of this research powers new capabilities added to DFFIND.
Some is shared through public blog posts and at conferences to advance understanding of how modern mobile systems behave.
Xn00p is a live kernel memory inspection and debugging toolkit developed by DFF Co-Founder & CTO Jonathan Levin, introduced in the *OS Internals series of books.
It enables direct, object-aware introspection of kernel memory on live systems or from kernel images, allowing researchers to traverse kernel structures and analyze system behavior at the level where advanced techniques execute.
Xn00p is used within DFF Labs for operating system research, reverse engineering, and development of mobile threat detection capabilities.
The research conducted by DFF Labs involves advanced system capabilities and security-sensitive technologies.
Submissions and collaboration must comply with applicable laws and regulations. Do not submit unauthorized data, personal information obtained without permission, or classified material.
Dataflow Forensics reserves the right to decline requests or submissions at its sole discretion.
Additional terms and conditions apply.
