Enter Sandman – Japan Pacsec 2007

Posted by Matthieu Suiche on December 6, 2007 · 4 Comments 

For people who wasn’t (or was :)) at PacSec the last week. Slides of Sandman lecture can be found in Japanese[PPT] or in English (updated – last version) [PDF].

[JP] http://www.msuiche.net/pres/psj07ruffsuiche-jp.pdf
[EN] http://www.msuiche.net/pres/PacSec07-slides-0.4.pdf

An overview of hibernation file format is explained and the forensics library we called Sandman is introduced.

Sandman status is reachable here :
http://sandman.msuiche.net/

Filed under Presentations, Windows · Tagged with