malware memory forensics using volatility

newer

older

format of UDP record in memory

Volatility branches?

malware monna

19 Jun 2012 19 Jun '12

9:33 a.m.

Hi All, I presented a topic on "malware memory forensics" using Volatility.....the ppt and video can be found in the below link....i hope you will like it :-) http://goo.gl/7bRFK Thanks, Monnappa

Attachments:

attachment.html (text/html — 297 bytes)

Show replies by date

Leo Manning

19 Jun 19 Jun

12:16 p.m.

Here is what Trend Micro reported on the link The website you wanted to see might transmit malicious software to your computer, or has done that before to someone else. It may also show signs of involvement in online scams or fraud. Address: http://nagareshwar.securityxploded.com/2012/06/16/training-session-part-8-%E 2%80%93-practical-reversing-iii-memory-forensics/ Rating: Dangerous What you can do: Description: http://127.0.0.1:37848/block_arrow.gif Try visiting another site to find the information you want. Description: http://127.0.0.1:37848/block_arrow.gif Top of Form Notify Trend Micro to review this page <javascript:doSubmit();> if you consider it safe. Bottom of Form Description: http://127.0.0.1:37848/block_arrow.gif If you still want to see this blocked page: 1. Open the Trend Micro Internet Security console. 2. Click Internet & Email Controls. 3. Click the Settings... button under Protection Against Web Threats. 4. Click the Approved websites link in the next window that opens. 5. Copy and paste the address of the blocked website into the list. From: vol-users-bounces(a)volatilityfoundation.org [mailto:vol-users-bounces@volatilityfoundation.org] On Behalf Of malware monna Sent: Tuesday, June 19, 2012 9:34 AM To: vol-users(a)volatilityfoundation.org Subject: [Vol-users] malware memory forensics using volatility Hi All, I presented a topic on "malware memory forensics" using Volatility.....the ppt and video can be found in the below link....i hope you will like it :-) http://goo.gl/7bRFK Thanks, Monnappa

Michael Hale Ligh

5:51 p.m.

The securityxploded.com site has a lot of password recovery tools, which Trend probably classifies as dangerous (same as most AV flagging nirsoft.nettools etc). On Tue, Jun 19, 2012 at 12:16 PM, Leo Manning < info(a)kenaicomputerforensics.com> wrote:

...

Here is what Trend Micro reported on the link**** ** ** The website you wanted to see might transmit malicious software to your computer, or has done that before to someone else. It may also show signs of involvement in online scams or fraud.**** *Address:* http://nagareshwar.securityxploded.com/2012/06/16/training-session-part-8-%… **** *Rating:* Dangerous**** **** What you can do:**** [image: Description: http://127.0.0.1:37848/block_arrow.gif]**** Try visiting another site to find the information you want.**** [image: Description: http://127.0.0.1:37848/block_arrow.gif]**** Top of Form**** Notify Trend Micro to review this page if you consider it safe.**** Bottom of Form**** [image: Description: http://127.0.0.1:37848/block_arrow.gif]**** If you still want to see this blocked page:**** 1. Open the Trend Micro Internet Security console.**** 2. Click *Internet & Email Controls*. **** 3. Click the *Settings...* button under *Protection Against Web Threats *. **** 4. Click the *Approved websites* link in the next window that opens. ** ** 5. Copy and paste the address of the blocked website into the list. *** * ** ** ** ** *From:* vol-users-bounces(a)volatilityfoundation.org [mailto: vol-users-bounces(a)volatilityfoundation.org] *On Behalf Of *malware monna *Sent:* Tuesday, June 19, 2012 9:34 AM *To:* vol-users(a)volatilityfoundation.org *Subject:* [Vol-users] malware memory forensics using volatility**** ** ** Hi All, I presented a topic on "malware memory forensics" using Volatility.....the ppt and video can be found in the below link....i hope you will like it :-) http://goo.gl/7bRFK Thanks, Monnappa**** _______________________________________________ Vol-users mailing list Vol-users(a)volatilityfoundation.org http://lists.volatilityfoundation.org/mailman/listinfo/vol-users

4531

days inactive

4531

days old

vol-users@lists.volatilityfoundation.org

Manage subscription

2 comments

3 participants

tags (0)

participants (3)

Leo Manning
malware monna
Michael Hale Ligh