Recalling Windows Memories: A Useful Guide to Retrieving and Analyzing Memory Content

Sign in to queue

Description

Acquiring and analyzing physical memory as done by forensics professionals is a skill crucial to understanding how an operating system works or worked during the incident. For hobbyists, working with memory can be useful to perform troubleshooting and understand how certain solutions work. Just as it is crucial to understand operating system internals and security aspects, it is equally critical to understand what's in the operating system's memory. The valuable content contains evidence of user actions, hacker's tasks, malicious code behaviors, and the story of what happened on a system. Learn techniques for memory acquisition, grabbing the juicy data, and why it is so amazing to find someone's memory dump!

Tag:

Security

Day:

5

Level:

200

Session Type:

Overview

Code:

BRK2342

Room:

S102

Embed

Download

Download this episode

Download captions

The Discussion

Add Your 2 Cents