http://www.secuobs.com L'observatoire de la securite Internet fr webmaster@secuobs.com Defending against RAM scraper malware in the enterprise http://www.secuobs.com/revue/news/192835.shtml http://www.secuobs.com/news/comments102072007-forensic_sstic.shtml#5108 http://www.secuobs.com/news/comments102072007-forensic_sstic.shtml#5108 ESRT @joedamato - New version of memprof available. It supports Ruby 1.8 binaries built with enable-shared http://www.secuobs.com/twitter/news/59145.shtml http://www.secuobs.com/news/comments102072007-forensic_sstic.shtml#4691 http://www.secuobs.com/news/comments102072007-forensic_sstic.shtml#4691 scanmem v0.08 released including a GUI called GameConqueror http://www.secuobs.com/revue/news/181576.shtml http://www.secuobs.com/news/comments102072007-forensic_sstic.shtml#4479 http://www.secuobs.com/news/comments102072007-forensic_sstic.shtml#4479 ESRT @sansforensics - Volatility's Output Rendering Functions http://www.secuobs.com/twitter/news/54622.shtml http://www.secuobs.com/news/comments102072007-forensic_sstic.shtml#4445 http://www.secuobs.com/news/comments102072007-forensic_sstic.shtml#4445 ESRT @postmodern_mod3 @joedamato : Release of memprof, a Ruby level memory profiler gem http://www.secuobs.com/twitter/news/46294.shtml http://www.secuobs.com/news/comments102072007-forensic_sstic.shtml#4090 http://www.secuobs.com/news/comments102072007-forensic_sstic.shtml#4090 ESRT @obsequens Scammers scrape RAM for bank card data http://www.secuobs.com/twitter/news/45489.shtml http://www.secuobs.com/news/comments102072007-forensic_sstic.shtml#4062 http://www.secuobs.com/news/comments102072007-forensic_sstic.shtml#4062 Windd 1.3 Final x86 and x64 http://www.secuobs.com/revue/news/149402.shtml http://www.secuobs.com/news/comments102072007-forensic_sstic.shtml#3315 http://www.secuobs.com/news/comments102072007-forensic_sstic.shtml#3315 Vidéo : Search and Dump Passwords from Memory using Memory DD http://www.secuobs.com/revue/news/135862.shtml http://www.secuobs.com/news/comments02072007-forensic_sstic.shtml#2933 http://www.secuobs.com/news/comments02072007-forensic_sstic.shtml#2933 ESRT @komeilipour Evilcodecave: Linux Process Memory Dumper in Python http://www.secuobs.com/twitter/news/18128.shtml http://www.secuobs.com/news/comments02072007-forensic_sstic.shtml#2863 http://www.secuobs.com/news/comments02072007-forensic_sstic.shtml#2863 SANS Forensics Memory forensics - A practical example http://www.secuobs.com/revue/news/129831.shtml http://www.secuobs.com/news/comments02072007-forensic_sstic.shtml#2698 http://www.secuobs.com/news/comments02072007-forensic_sstic.shtml#2698 Windows 7 Memory Manager and Committed Memory, SystemCommittedMemoryInformation http://www.secuobs.com/revue/news/127348.shtml http://www.secuobs.com/news/comments02072007-forensic_sstic.shtml#2573 http://www.secuobs.com/news/comments02072007-forensic_sstic.shtml#2573 New tool helps reconstruct attacks that don't leave traces on hard drives http://www.secuobs.com/revue/news/124277.shtml http://www.secuobs.com/news/comments02072007-forensic_sstic.shtml#2451 http://www.secuobs.com/news/comments02072007-forensic_sstic.shtml#2451 Vidéo : Whats in your RAM - Hak5 http://www.secuobs.com/revue/news/120819.shtml http://www.secuobs.com/news/comments02072007-forensic_sstic.shtml#2367 http://www.secuobs.com/news/comments02072007-forensic_sstic.shtml#2367 Save Support Dollars by Checking Your Memory Dump before Calling Support http://www.secuobs.com/revue/news/109336.shtml http://www.secuobs.com/news/comments02072007-forensic_sstic.shtml#1914 http://www.secuobs.com/news/comments02072007-forensic_sstic.shtml#1914 Challenge of Windows physical memory acquisition and exploitation http://www.secuobs.com/revue/news/108932.shtml http://www.secuobs.com/news/comments02072007-forensic_sstic.shtml#1899 http://www.secuobs.com/news/comments02072007-forensic_sstic.shtml#1899 Memory Tools Perform Differently http://www.secuobs.com/revue/news/92763.shtml http://www.secuobs.com/news/comments02072007-forensic_sstic.shtml#1355 http://www.secuobs.com/news/comments02072007-forensic_sstic.shtml#1355 Kaminsky: MS security assessment tool is a 'game changer' http://www.secuobs.com/revue/news/73521.shtml http://www.secuobs.com/news/comments02072007-forensic_sstic.shtml#825 http://www.secuobs.com/news/comments02072007-forensic_sstic.shtml#825 Microsoft released !exploitable at CanSecWest. This debugging extension provides automated crash analysis and security risk assessment. http://www.secuobs.com/revue/news/73516.shtml http://www.secuobs.com/news/comments02072007-forensic_sstic.shtml#823 http://www.secuobs.com/news/comments02072007-forensic_sstic.shtml#823