memscope is a Windows memory inspection and debugging utility focused on Windows internals experimentation.
It provides tools for exploring process memory layouts, inspecting memory regions, reading process memory, and experimenting with low-level Windows APIs in a controlled environment.
- Process enumeration
- Memory region inspection
- Protection/state/type decoding
- Hex and ASCII memory viewer
- Pattern and string search
- Region dump export
- Windows internals learning utilities