27 April 2022 to 30 May 2022
Europe/Amsterdam timezone

IT Forensics - Memory Analysis Basics - First Steps

4 May 2022, 11:00


Mr Klaus Möller (DFN-CERT)


Having obtained an image of the memory of a compromised system, what to do with it? This part of the forensic process is called analysis, and this webinar will go through the first steps of analysing a memory image, looking into processes, network and temporary filesystems as well as some operating system specific artefacts, such as the Windows registry of the Linux Bash history.

Presentation Materials

There are no materials yet.