Modern threats necessitate active hunting for malware and attackers throughout an organisation’s environment.  Unfortunately, traditional approaches to detection of this malicious activity are now inadequate as advanced malware and skilled attackers easily mislead them.  During this presentation attendees will learn how malware and attackers evade these traditional methods as well as how memory and network forensics can be used to give defenders an upper hand.

It’s time to re-up your skills at hunting evil in memory by learning the new normal, Windows 10. Advance your memory forensics skills for what is expected to be the most rapidly adopted enterprise Windows version of all time. Find out what is new in Windows 10 OS artifacts, browsing history and memory management and how the memory forensic frameworks are keeping up. With a current adoption rate of 10% and growing, it is only a matter of time before this OS version will make up the majority of your digital forensics and incident response casework. This presentation will provide insight into the significant changes introduced with Windows 10 and how they will affect your [...]

Apple users were quick to update their devices to iOS 10. In fact, they were quicker to update than with any previous release. Within one month, two-thirds of iOS devices were updated.

In this issue Andrew Case from the Volatility Project talking about Volatility 2.5, new plugins and the winners of this years Volatility Plugin Contest. Also Yogesh Kahtri from Champlain talking about SRUM forensics in Windows 8.1+. Matt and David talking about their new open source tool Elastic Handler.