For people who wasn’t (or was :)) at PacSec the last week. Slides of Sandman lecture can be found in Japanese[PPT] or in English (updated – last version) [PDF]. [JP] http://www.msuiche.net/pres/psj07ruffsuiche-jp.pdf [EN] http://www.msuiche.net/pres/PacSec07-slides-0.4.pdf An overview of hibernation file format is explained and the forensics library we called Sandman is introduced. Sandman status is reachable here [ Read More ]
