13Cubed - Investigating Windows Memory

If you've taken Investigating Windows Endpoints (or already have the equivalent knowledge), this is a natural continuation of the content that deep dives into Windows memory forensics. Learn the foundations of how Windows memory is structured, how to acquire memory, how to analyze memory images using Volatility, MemProcFS, and WinDbg, and more!

13Cubed - Investigating Windows Memory
Size: 15.4 GB
Contains: 55 Files, 13 Folders

Course Contents.
- Welcome and Introduction
- Initial Setup
- Foundations of Memory Forensics
- Acquiring Memory
- Poor Man's Memory Forensics
- Memory Analysis with Volatility
- Malware Memory Analysis with Volatility
- Memory Analysis with MemProcFS
- Malware Memory Analysis with MemProcFS
- Introduction to WinDbg
- Additional Content

FOR EDUCATIONAL PURPOSES ONLY!