Antivirus is a heck of a thing. On the one hand, security professionals love to hate on Antivirus because it’s misses a lot of malware and increases the attack surface on a machine. We know that antivirus regularly misses Advanced Persistent Threat (APT) malware. Our stance at Rendition Infosec is that for the vast majority […]
Archive | November, 2017
Memory Forensics Plugins
Incident Response Memory ForensicsOn November 21, 2017 I did a webcast for the SANS Institute to discuss memory forensics. During the webcast, we discussed a number of custom plugins for Volatility to assist in the analysis of memory images. I’ve posted the plugins here. Enjoy!