SDF: Memory Forensics 1

Unlock Rapid Compromise Assessment with Memory Forensics & Volatility

This updated course (completely rewritten in 2019!) equips you with the skills to perform memory forensics using Volatility, a powerful open-source memory analysis framework. Discover how to quickly triage potential security breaches and uncover critical evidence within a system's memory.

What you'll learn:

• Fast Triage of Compromises: Master techniques for rapidly assessing system memory to identify signs of malicious activity.
• Memory Image Analysis: Learn to work with various memory image formats, including raw memory images, hibernation files, and VM images.
• Volatility Plugin Mastery: Run and interpret Volatility plugins to extract valuable data.
• Evidence Recovery: Uncover evidence of malware, data spoliation, file usage, and other crucial indicators of compromise.
• Incident Response & Digital Forensics: Develop skills applicable to both incident response triage and comprehensive digital forensic exams, including support for litigation.
• Hands-on Practical Experience: Reinforce your learning through practical exercises.

This course delivers comprehensive memory forensics training in approximately one hour, utilizing only freely available tools. Gain valuable skills for protecting systems and investigating security incidents.