Post-Mortem RAM Forensics - CanSecWest
Post-Mortem RAM Forensics - CanSecWest
Post-Mortem RAM Forensics - CanSecWest
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
<strong>CanSecWest</strong>2007<br />
45<br />
Cited<br />
• Windows Internals, Russinovich /<br />
Solomon<br />
• Intel 64 and IA-32 Architectural<br />
Software Developers Manuals<br />
– PDFs are online<br />
– Dead Tree copies are FREE<br />
• Rootkits, Hogland / Butler<br />
• Reversing, Eilam<br />
• And the papers/documents footnoted in<br />
the slides<br />
VIDAS