SANS DFIR WEBCAST - How memory forensics will help you lose weight and look ten years younger

Подробнее о видео

Ok, so maybe not quite those things, but memory forensics can help your investigation in ways which no other technique can match. Memory images contain user data which is unavailable from other sources, such as encryption keys and full-content network traffic. Previously existing memory images on your system may give you these kinds of details from an earlier time in the computer's history. Those of you looking for malware will be pleased to know that programs and drivers simply cannot hide in memory. We will suss them out no matter where there go. All of this adds up to faster and better results in your cases, leaving you with time to lose weight and look younger naturally!

by Jesse Kornblum

Jesse Kornblum is a Security Engineer for Facebook. Based in the San Francisco Bay area, his research focuses on computer forensics and computer security. He has helped pioneer the field of memory analysis and authored a number of computer forensics tools. These tools include the Hashdeep suite of programs and the ssdeep system for fuzzy hashing similar files. A graduate of the Massachusetts Institute of Technology, Mr. Kornblum previously served as a computer crime investigator for the Air Force and with the Department of Justice.