This is the 2nd of 3 videos that we showed at Black Hat Arsenal this year: http://volatility-labs.blogspot.com.au/2014/08/volatility-24-at-blackhat-ar… This video takes you through using Volatility to automatically find, extract, and analyze a rootkit with both kernel and userland components. -- Thanks, Andrew (@attrc)