Ottawa Chapter Meeting

Title:

RAM Forensics Trilogy – Part I

Speaker(s):

Andrew Caldwell

Bio:

Andrew started his journey into cyber security as a co-op from Algonquin College in Ottawa and recruited after a CTF (Capture The Flag) challenge amongst all the schools in the local area. Continuing his learning and exploration journey into cyber security from digital forensics and incident response to threat research and Open-source Intelligence (OSINT).

Topic of Presentation:

This technical presentation stems from the learning journey into the skill set of RAM analysis. This first part of the series will go over some of the fundamentals, and outline the nuances in how to set up an environment to preform RAM analysis. We’ll discuss the limitations of RAM collection and risks involved when considering the criticality of the target. Together, we’ll discuss the simplicity of "quick wins" which can be achieved in a rapid response situation.