~/talk

Investigating Malware Using Memory Forensics - A Practical Approach

Talkat Black Hat Asia 2019 · 2019-03-26..03-29· [security]
links:none on file
slides:none on file

Covers practical memory forensics techniques for detecting, investigating, and understanding malware capabilities using tools and live demonstrations. Demonstrates tricks malware uses, including stealth and evasion techniques, and shows how memory analysis reveals those behaviors.

AI-written summary · about

  1. 0:00Investigating Malware Using Memory Forensics - A Practical Approach
  2. 1:01Monnappa KA • Info Security Investigator - Cisco CSIRT • Author of the Book: Learning Malware Analysis • Member of Black Hat Review Board • Co-founder Cysinfo Security Community • Creator of Limon Sandbox • Winner of Volatility Plugin Contest 2016
  3. 2:53Memory Acquisition - Dumping the memory of a target machine to disk
  4. 6:55Memory Analysis of Infected System (KeyBase Malware)
  5. 20:57Memory Analysis of Infected System (Darkcomet RAT)
  6. 39:37Investigating Hollow Process Injection
  7. 46:14Investigating Rootkits
  8. 47:00Memory Analysis of ZeroAccess Rootkit
  9. 57:25Example - Memory Analysis of Necurs Rootkit
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.