Post-Mortem RAM Forensics - CanSecWest
Post-Mortem RAM Forensics - CanSecWest
Post-Mortem RAM Forensics - CanSecWest
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
<strong>CanSecWest</strong>2007<br />
35<br />
PoC: Demo<br />
• SO…given that the demo was<br />
successful<br />
– We saw that it is possibly to get as<br />
much (or more) information postincident<br />
while cause as much (or<br />
less) impact to the system<br />
• OR if it wasn’t successful<br />
– We _should_ have seen the above ;-)<br />
VIDAS