Memory Forensics Acquisition in the Cloud

As more and more organizations begin moving their resources to the cloud, analysts and responders must be prepared to operate in this new landscape. One aspect of traditional forensics that we must learn to implement in the cloud is memory forensics.

In this webcast, Mat Fuchs (author and instructor for FOR532: Enterprise Memory Forensics In-Depth) and Megan Roddie (co-author and instructor for FOR509: Enterprise Cloud Forensics and Incident Response) look at how to approach memory forensics when responding to incidents in cloud environments.

• First, we’ll explain what cloud services fall in scope when discussing memory forensics.

• Next we’ll discuss the tools, services, and processes that can be leveraged for acquisition, both cloud-native and third-party options.
• Finally, we’ll wrap up with some examples of performing targeted memory analysis in the cloud.
• At the end of this webinar, attendees should walk away with ideas for how memory analysis can be implemented in their organization’s processes and procedures.