13.09.2013 Views

Post-Mortem RAM Forensics - CanSecWest

Post-Mortem RAM Forensics - CanSecWest

Post-Mortem RAM Forensics - CanSecWest

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

<strong>CanSecWest</strong>2007<br />

45<br />

Cited<br />

• Windows Internals, Russinovich /<br />

Solomon<br />

• Intel 64 and IA-32 Architectural<br />

Software Developers Manuals<br />

– PDFs are online<br />

– Dead Tree copies are FREE<br />

• Rootkits, Hogland / Butler<br />

• Reversing, Eilam<br />

• And the papers/documents footnoted in<br />

the slides<br />

VIDAS

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!