Memory Remains: Useful Techniques for Retrieving and Analyzing Memory Content

NTK 2015
Stopnja 400
Datum sreda
20. maj 2015 08:30

During this session Paula will explain and show the techniques for memory acquisition, techniques for grabbing the juicy data, and why it is so amazing to find someone's memory dump! Acquiring and analyzing physical memory as done by forensics professionals is a crucial skill to understand how an operating system works or worked during the incident. For hobbyists, working with memory can be useful to perform troubleshooting and understand how certain solutions work. The valuable content contains evidence of user actions, hacker's tasks, malicious code behaviors, and the story of what happened on a system. This session is really intense but practical at the same time, as always it is packed with a lot of live demos and stories, so make sure you leave the party earlier in order to not to miss a thing!

Paula Januszkiewicz is the IT Security Auditor and Penetration Tester, Enterprise Security MVP and trainer (﴾MCT)﴿ and Microsoft Security Trusted Advisor. She is also a top speaker at many well-‐known conferences including TechEd North America, TechEd Europe, TechEd Middle East, RSA, TechDays, CyberCrime, etc., and is often rated as number-‐one speaker. Paula is engaged as a keynote speaker for security related events and she writes articles on Windows Security. She drives her own company CQURE, working on security related issues and projects. Paula has conducted hundreds of IT security audits and penetration tests, including those for governmental organizations. Her distinct specialization is definitely on Microsoft security solutions in which she holds multiple Microsoft certifications, besides being familiar with and possessing certifications in other related technologies. Paula is passionate about sharing her knowledge with others. In private, she enjoys researching new technologies, which she converts to authored trainings. She wrote a book about Threat Management Gateway 2010, and is working on her next book. She has access to a source code of Windows! Every year she makes over 200 flights (﴾2013 -‐ 248)﴿ to gain more and more experience, provides penetration tests and consults Customers about how to secure their infrastructures.