Post-Mortem RAM Forensics - CanSecWest
Post-Mortem RAM Forensics - CanSecWest
Post-Mortem RAM Forensics - CanSecWest
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
<strong>CanSecWest</strong>2007<br />
24<br />
…it must be an EProcess!<br />
• In practice it seems that even a<br />
few number of tests (like about 5)<br />
can produce extremely accurate<br />
results<br />
• This methodology can also be<br />
applied to other structures…<br />
threads are an obvious next step<br />
VIDAS