Using only open sources tools we will dive into two examples where memory forensics saves the day! In the first example, we will track an insider threat who is attempting to steal our secret cat meme respository. The second example we will dive into a possible phishing email that a user has reported to the service desk and determine if/what evil payload may have been dropped onto our clients system. If you've ever wanted to learn more about memory forensics and Volatility than this talk is for you!

Kyle Andrus is a DFIR advocate and slightly addicted to computer forensics. His last 4 years has been spent focusing on endpoint security and digital forensics. Kyle also runs MiSec Jackson and will always add a cat picture to every powerpoint presentation.

Back to BSides Detroit video list