In one of (hopefully) many videos I will be creating highlighting the capabilities of Volatility, a free memory analysis tool.
This video shows grabbing the windows NTLM passwords from a memory dump and then using John the Ripper to crack them.
In other videos I hope to show using a memory dump to detect rootkits and badness on a system.
I have a security blog at: http://sketchymoose.blogspot.com
Awesome video!
~Darkforums com
DJRexim 3 months ago