Alessandro Gario

Summary: Trail of Bits is open-sourcing mquire, a tool that analyzes Linux memory dumps without requiring any external debug information, announced by Alessandro Gario on February 25, 2026. The same author's earlier posts cover step-by-step methods for applying BPF tracing to real-world problems and a maintained repository of osquery extensions, starting with one that checks Mac EFI firmware against the Duo Labs EFIgy API.
What you should know: Linux memory forensics has typically depended on external debug information to make sense of a dump, and mquire removes that dependency for the analyst doing the work.

Read the original at Trail of Bits Blog ↗