Archive for June 12th, 2009

Challenge of Windows physical memory acquisition and exploitation

June - 12 - 2009
Posted by Matthieu Suiche
Comments Off

(Honolulu, HW) – Here is a quick post to provide ressources presented this afternoon at Shakacon 2009. This talks aims at showing to win32dd users (forensics engineers, investigators, incident response engineers, ..) why physical memory analysis is important, and mainly covers how to rethink memory acquisition and exploitation in a more efficient way. Slides are  [ Read More ]

Sponsors