tag:blogger.com,1999:blog-9518042.post2386786968265693549..comments2024-03-19T07:46:20.437-05:00Comments on Windows Incident Response: UpdatesUnknownnoreply@blogger.comBlogger4125tag:blogger.com,1999:blog-9518042.post-70044840156248949442011-05-09T19:58:57.404-05:002011-05-09T19:58:57.404-05:00Do we have a free memory acquisition tool...
I...<i>Do we have a free memory acquisition tool...</i><br /><br />I'm not sure how you define "...<i>in the same league as Volatility</i>", but you should consider:<br /><br />http://www.moonsols.com/products/H. Carveyhttps://www.blogger.com/profile/08966595734678290320noreply@blogger.comtag:blogger.com,1999:blog-9518042.post-21657120127736790172011-05-09T19:43:54.863-05:002011-05-09T19:43:54.863-05:00Volatility is simply awesome- a great example of h...Volatility is simply awesome- a great example of how a free tool can run circles around the expensive commercial tools.<br /><br />While volatility is great for memory analysis, what are the preferred tools for memory acquisition? Do we have a free memory acquisition tool in the same league as Volatility?Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-9518042.post-49164993372436181332011-05-05T12:55:57.767-05:002011-05-05T12:55:57.767-05:00Thanks, I will check them out.
One of last night&...Thanks, I will check them out.<br /><br />One of last night's attendees is from Baltimore...he's trying to get something set up in that area.H. Carveyhttps://www.blogger.com/profile/08966595734678290320noreply@blogger.comtag:blogger.com,1999:blog-9518042.post-25988539401125224022011-05-05T09:09:27.292-05:002011-05-05T09:09:27.292-05:00In regards to a meeting location, you may want to ...In regards to a meeting location, you may want to consider touching base with the folks at ReverseSpace. It's a hacker space in Herndon that has regular information security meetings/presentations presented there. They also have a Forensic Working Group night already on their schedule.<br />http://www.reversespace.com/<br /><br />I wish I was a bit more local to attend, but it's a bit of a haul from Baltimore.Rurikhttps://www.blogger.com/profile/00584308743517687332noreply@blogger.com