Fixing A Memory Forensics Blind Spot Linux Kernel Tracing

The ubiquity of

You're likely familiar with many tools that allow us to capture

This presentation mainly focuses on the practical concept of

00:00 - Intro 00:47 - Discovering a weird binary running in /tmp/ but it doesn't exist on disk 01:55 - Start of explaining dd copying ...

This video walks you through the steps for collecting the relevant set of LTTng events to analyze disk activity on

In this episode, we'll take a look at a quick and easy way to find the Intermediate Symbol File (ISF) for the

You're likely familiar with many tools that allow us to capture

I found a real out-of-bounds read in the

How robust is the security of a fully updated, widely used and locked-down

Linux kernel

In this video we show how Columbo can be used for the purpose of Windows

What do you do when you know there is more to the story than what the tool is reporting back to you? This presentation will walk ...

Memory forensics

File timestamps are used by

Linux Kernel

Debugging,

Memory

Learning to use Volatility to investigate