process-analysis

1 talk tagged with this topic.

Filters+

Loading filters…

1–1 of 1 talk · loading…

Sort

Main Stage·47 min

DEF CON
Blue Team
Date: Aug 2015
Location: Las Vegas

Advances in Linux Process Forensics Using ECFS

Ryan O'Neill

Ryan O'Neill introduces the Extended Core File Snapshot (ECFS) format, enabling granular dead-state forensic reconstruction of injected Linux processes.

linux-forensicsmemory-forensicscoredump+2