This is intended to store code and instructions from the FBI/NSA for detecting DROVORUB. If I can ever find it.

PDF is here: https://media.defense.gov/2020/Aug/13/2002476465/-1/-1/0/CSA_DROVORUB_RUSSIAN_GRU_MALWARE_AUG_2020.PDF

Volatility tools:

$ git clone https://github.com/volatilityfoundation/volatility

$ cd volatility

$ sudo python setup.py install

$ sudo python /usr/local/bin/vol.py -f /root/working/mem.img --profile=LinuxCentOS65x64 linux_hidden_modules

I'm not having much luck so far