Post-Mortem RAM Forensics - CanSecWest
Post-Mortem RAM Forensics - CanSecWest
Post-Mortem RAM Forensics - CanSecWest
SHOW LESS
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
<strong>CanSecWest</strong>2007<br />
45<br />
Cited<br />
• Windows Internals, Russinovich /<br />
Solomon<br />
• Intel 64 and IA-32 Architectural<br />
Software Developers Manuals<br />
– PDFs are online<br />
– Dead Tree copies are FREE<br />
• Rootkits, Hogland / Butler<br />
• Reversing, Eilam<br />
• And the papers/documents footnoted in<br />
the slides<br />
VIDAS
Change language