Transcription of Detecting Malware With Memory Forensics - Deer …
{{id}} {{{paragraph}}}
Example: bachelor of science
Detecting Malware With Memory Forensics - Deer …
Detecting Malware with Memory Forensics Hal Pomeranz SANS Institute Why Memory Forensics ? Everything in the OS traverses RAM Processes and threads Malware (including rootkit technologies) Network sockets, URLs, IP addresses Open files User generated content Passwords, caches, clipboards Encryption keys Hardware and software configuration Windows registry keys and event logs Memory Analysis Advantages Best place to identify malicious software activity Study running system configuration Identify inconsistencies (contradictions) in system Bypass packers, binary obfuscators, rootkits (including kernel mode) and other hiding tools.
Why Memory Forensics? Everything in the OS traverses RAM • Processes and threads • Malware (including rootkit technologies) • Network sockets, URLs, IP addresses
Loading..
Tags:
Information
Domain:
Source:
Link to this page:
Please notify us if you found a problem with this document: