October 2009 Archives

The next Digital Forensic Research Conference (DFRWS) will held from August 2 to 4, 2010 in Portland, Oregon. Ten years ago, DFRWS started as a workshop and over the years evolved into a conference, that brings together researchers and practitioners from authorities and the private sector. Let's celebrate the 10^th anniversary with a stream of top-notch papers. The call for papers is open, papers are due February 28, 2010.

AAron Walters is planning an Open Memory Forensics Workshop (OMFW) for 2010. If you're into memory analysis, attending this workshop is a must! Please contact AAron for further details. (via Jamie Levy)

I'm excited to announce that I will teach a two-day class on Windows memory analysis at the upcoming Hoffmann's Advanced Forensic Sessions. The sessions will held from November, 16 to 20, 2009 in Almere near Amsterdam. Other instructors will cover Microsoft Office file formats, the Apple Mac and iPhone, and advanced file carving techniques. Registration is still open, please see Hoffmann's web site for further information.

The free Electronic Newsletter on the fight Against Cybercrime (ENAC) covers a variety of aspects, like the legal system and jurisprudence, data protection, upcoming events, but also technical aspects like computer forensics. The October 2009 issue (no. 4) is now available for download (PDF).

Four years ago, at the DFRWS 2005, the first tools to analyze Windows memory images were presented in public. These ideas and methods now gradually make it into commercial off-the-shelf forensic products. The latest tool that provides Windows memory analysis capabilities is AccessData's Forensic Toolkit 3.