Solomon Sonya - Master Class: A New Construct- Adv Volatile Memory Analysis

DEF CON Workshops are an opportunity to learn from others in our community in a four hour class. The workshops range in difficulty from n00b to hardcore hacker and on almost any topic that you can think of in the realm of hacking.Now on to some things to keep in mind while you look at which workshop(s) to register for:Workshop Registration will be handled online. Announcement will be made as we get ready to open reg the day before.In order to decrease the number of no-shows, DEF CON Workshops will be instituting a $25 registration fee to attendees. Tickets are available on a first come, first served basis. Additional costs include possible low-fee for material costs, if applicable, and will be collected by the instructor at the time of the workshop.There will be a limited number of students on standby lists for each class, should a registration cancel.There will beNOonsite registration, period. Anyone on standby will be notified they are on standby before the conference. There will beNOonsite standby line or list to sign up for. Everything will be arranged pre-con.Students will be limited to purchasing 2 tickets per class.You can register for as many classes as you can attend in one day. ( No two classes at the same time. If you have mastered occupying two spaces at the same time, there are some physics academics who would be pleased to meet you among others)

DEF CON WORKSHOPS

Saturday AM - Ely
Solomon Sonya - Master Class: Delivering a New Construct in Advanced Volatile Memory Analysis for Fun and Profit

Harrah's Las Vegas

DEF CON 30 - Saturday AM Workshops

Malware continues to advance in sophistication. Well-engineered malware can obfuscate itself from the user and the OS. Volatile memory is the unique structure malware cannot evade. I have engineered a new construct for memory analysis and a new open-source tool that automates memory analysis, correlation, and user-interaction to increase investigation accuracy, reduce analysis time and workload, and better detect malware presence from memory. This workshop introduces a new visualization construct that creates the ability to interact with memory analysis artifacts. We will cover how to conducted advanced memory analysis utilizing this brand new tool that will greatly enhance the analysis process. Additionally, we will learn how to use new Data XREF and System Manifest features in this workshop. Data XREF provides an index and memory context detailing how your search data is coupled with processes, modules, and events captured in memory. The System Manifest distills the analysis data to create a new memory analysis snapshot and precise identification of malicious artifacts detectable from malware execution especially useful for exploit dev and malware analysis! This talk is perfect if you have conducted memory analysis before and understand the pain it is to conduct this type of analysis by hand. In this workshop, we will work with a new revolutionary tool to automate, correlate, and enrich memory analysis saving you hours of analysis time. This workshop exposes participants to capture-the-flag memory analysis challenges utilizing the new Xavier Memory Analysis Framework and concludes with a culminating capstone exercise at the end. Participants will walk away with advanced memory analysis capabilities including how to recognize and handle various forms of advance code injection and rootkit hooking techniques from computer memory.Pre-requisites: <ul><li>None</li></ul>Materials or Equipment Required:<ul><li>A laptop with VirtualBox installed. I will provide the memory images with all tools configured ready for the workshop.</li></ul>

Our {communityGuidelinesLink} describe the sort of content we prohibit on Eventbrite. If you suspect an event may be in violation, you can report it to us so we can investigate.

To report other categories of prohibited or illegal content, submit {link}

Solomon Sonya - Master Class: A New Construct- Adv Volatile Memory Analysis

More events from DEF CON WORKSHOPS

Discover more events from DEF CON WORKSHOPS, from Science & Tech to other experiences you might love.

Still looking for the right event?

Explore all events in Las Vegas and filter by date, category, and more to find the perfect fit.

Solomon Sonya - Master Class: A New Construct- Adv Volatile Memory Analysis

More events from DEF CON WORKSHOPS

Discover more events from DEF CON WORKSHOPS, from Science & Tech to other experiences you might love.

You might also like...

Browse more events with different dates, prices, and formats to find your next great experience.

Still looking for the right event?

Explore all events in Las Vegas and filter by date, category, and more to find the perfect fit.