Ram Forensics - Presented at Forensecure: Cyber Forensics & Security Conference 2016 скачать в хорошем качестве

Ram Forensics - Presented at Forensecure: Cyber Forensics & Security Conference 2016

This presentation provides insight into the latest RAM Forensic acquisition and analysis tools. We will compare the acquisition tools WinPmem, Memoryze, and FTK Imager. We will compare the analysis tools Mandiant Redline, Volatility, and Rekall. Based on a series of comparisons we will determine the best tools to use in addition to demonstrations that illustrate our findings. The first semester in ITMS 548 we will focus on researching and understanding the acquisition and analysis tools as well as setting up a Windows 8.1 physical system that will reside in the Illinois Institute of Technology computer lab. The following semester we will conduct a forensic analysis of this Windows 8.1 system. Presented by Illinois Institute of Technology students Justin Poirier, Melanie Thompson and Thibaut Granger.