Post-Mortem RAM Forensics - CanSecWest
Post-Mortem RAM Forensics - CanSecWest
Post-Mortem RAM Forensics - CanSecWest
SHOW LESS
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
<strong>CanSecWest</strong>2007<br />
4<br />
Talk Assumptions<br />
• Only talking about x86 architecture<br />
• Only talking about MS Windows<br />
(nt based)<br />
• Only talking about ‘normal’ setups<br />
(no ‘weird’ boot switches or builds)<br />
VIDAS
Change language