June 2007 Archives

There's a new conference on the subject of digital forensics forming in Europe. The Digital Forensic Forum (DFF) will be held in Prague, Czech Republic, on November 26 and 27, 2007. The Call for Papers is still open until August 31, 2007.

This brief post again provides you with a snippet to go into your magic(5). It allows file(1) to determine whether the page file contains a memory dump. We will then use this information in order to to extract the memory dump from a pagefile.sys.

A blog post by Harlan Carvey made me aware of some official documentation of the Event Log Header and EOF structures.