06Dec
Enter Sandman - Japan Pacsec 2007
Presentations, WindowsFor people who wasn’t (or was :)) at PacSec the last week. Slides of Sandman lecture can be found in Japanese[PPT] or in English (updated - last version) [PDF].
[JP] http://www.msuiche.net/pres/psj07ruffsuiche-jp.pdf
[EN] http://www.msuiche.net/pres/PacSec07-slides-0.4.pdf
An overview of hibernation file format is explained and the forensics library we called Sandman is introduced.
Sandman status is reachable here :
http://sandman.msuiche.net/
Thursday, December 6th, 2007 at 7:46 pm and is filed under Presentations, Windows. You can follow any responses to this entry through the RSS 2.0 feed. Both comments and pings are currently closed.
I’ll be very interested to see how this develops, particularly into something that can be used for forensic analysis…
Thanks!
Harlan
You can see the progress of Sandman here:
http://sandman.msuiche.net/
lol du geek au bureaucrate. :)
ca paye decidement de se chier sa scolarité :D
A chacun ses finalités.