homepage
Open menu
Contact Sales

Using windows crash dumps for remote incident identification

With the proliferation of defense mechanisms built into Windows Operating System,, such as ASLR, DEP, and SEHOP, it is getting more difficult for malware to successfully exploit it. The Microsoft Enhanced Mitigation Exploitation Toolkit further increases the difficulty. A common symptom of a failed...
By
Zong Fu Chua
June 16, 2015
Download

All papers are copyrighted. No re-posting of papers is permitted

470x382_Generic_Whitepaper.jpg

Related Content

Blog
DFIR - Blog - Reflections on the US Government’s OIG Report_340 x 340.jpg
Digital Forensics, Incident Response & Threat Hunting
Reflections on the US Government’s OIG Report on CISA’s Automated Indicator Sharing Program
The memorandum outlined findings and recommendations for improving perceived deficiencies with one of its information sharing programs.
John_Doyle_370x370.png
John Doyle
read more
Blog
Security Awareness, Artificial Intelligence (AI), Digital Forensics, Incident Response & Threat Hunting, Cloud Security, Cyber Defense, Offensive Operations, Pen Testing, and Red Teaming, Industrial Control Systems Security, Open-Source Intelligence (OSINT)
Top SANS Summit Talks of 2024
This year, SANS hosted 13 Summits from OSINT, ICS, Ransomware, DFIR to HackFest. Here were the top-rated talks of the year.
370x370-person-placeholder.png
Alison Kim
read more
Blog
DFIR - Blog - SOF-ELK's Evolution- A Comprehensive Update for Enhanced Digital Forensics_340 x 340(1).jpg
Digital Forensics, Incident Response & Threat Hunting
SOF-ELK®'s Evolution: A Comprehensive Update for Enhanced Digital Forensics
SOF-ELK is a free, open source bootable VM preconfigured with a custom Elastic Stack implementation tailored to security and investigative workflows.
Phil Hagen
Phil Hagen
read more