35+ Cyber Security Courses at SANS Cyber Defense Initiative® in Washington, DC! Save up to $300 thru 10/16.

Webcasts

To attend this webcast, login to your SANS Account or create your Account.

How memory forensics will help you lose weight and look ten years younger

  • Monday, February 25th, 2013 at 8:00 PM EST (01:00:00 UTC)
  • Jesse Kornblum

You can now attend the webcast using your mobile device!

Overview

Ok, so maybe not quite those things, but memory forensics can help your investigation in ways which no other technique can match. Memory images contain user data which is unavailable from other sources, such as encryption keys and full-content network traffic. Previously existing memory images on your system may give you these kinds of details from an earlier time in the computer's history. Those of you looking for malware will be pleased to know that programs and drivers simply cannot hide in memory. We will suss them out no matter where there go. All of this adds up to faster and better results in your cases, leaving you with time to lose weight and look younger naturally!

Speaker Bio

Jesse Kornblum

Jesse Kornblum is a Security Engineer for Facebook. Based in the San Francisco Bay area, his research focuses on computer forensics and computer security. He has helped pioneer the field of memory analysis and authored a number of computer forensics tools. These tools include the Hashdeep suite of programs and the ssdeep system for fuzzy hashing similar files. A graduate of the Massachusetts Institute of Technology, Mr. Kornblum previously served as a computer crime investigator for the Air Force and with the Department of Justice.

Need Help? Visit our FAQ page or email webcast-support@sans.org.

Not able to attend a SANS webcast? All Webcasts are archived so you may view and listen at a time convenient to your schedule. View our webcast archive and access webcast recordings/PDF slides.