About the Malware and Memory Forensics | M&MF
The purpose of the workshop is to teach students essential memory forensics; this workshop assumes a basic understanding of PC’s, networks, and basic forensics.
Course Information
Course Curriculum
a. Swap space analysis
b. Memory Analysis
c. Data acquisition as per RFC 3227
a. Current processes
b. Memory mapped files
c. Caches
d. Open Ports
a. Data structures
b. Windows Objects
c. Processes
d. Handles
e. Pool-tag scanning
f. %SystemDrive%/hiberfil.sys
g. Page/Swap File
a. Using volatility
b. Dumpit.exe
c. hibr2bin
d. Win32dd
e. Win64dd
f. OSForensics
Get the Full Syllabus as a PDF
Curriculum, exam format & everything included — sent straight to your inbox.
All You Need to Know
This training is useful for any forensic investigator but is particularly interesting to those trying to trace data leaks, financial crimes, and cyber-related crimes. This workshop includes hands-on labs.
- One year access to training videos from master trainer
- Six months access to ilabs