Programm
- Evidence Gathering
- Memory: Dumping and Analysis
- Memory: Indicators of compromise
- Disk: dumping & analysis
- Disk: extracting and interpreting evidence
Ziele
Students will learn the general idea on good practices regarding the evidence gathering. They will be able to perform memory dumps, analyze them and recognize indicators of compromise. Students will also learn how to dump and analyze forensic data from disks, and how to properly extract as well as interpret evidence.