Retrieve application data stored in memory from a Windows memory dump
Date: 09/03/2021 Organizer: Mossé Cyber Security Institute Validate ID: mz4cWy8LJuOdWzgTvRsq
Retrieve processes and DLL information from a Windows memory dump
Date: 09/03/2021 Organizer: Mossé Cyber Security Institute Validate ID: cYmyM8Ro3GMRwFyrqE4z
Investigate a Meterpreter backdoor installed as a Windows Service
Date: 03/03/2021 Organizer: Mossé Cyber Security Institute Validate ID: U5wFlruZlWThG2PxRSQA
Investigate obfuscated PowerShell commands
Date: 01/03/2021 Organizer: Mossé Cyber Security Institute Validate ID: T9kjgKbRjk7Ga2DHyIWM
Intro to DFIR: The Divide and Conquer Process (3 hours)
Date: 12/02/2021 Organizer: Basis Technology Validate ID: ts1prt5lna
Investigate an unauthorised SSH tunnel
Date: 15/01/2021 Organizer: Mossé Cyber Security Institute Validate ID: ysmM24dnZJXur0vYI3C8
Investigate password dumping with Procdump
Date: 15/01/2021 Organizer: Mossé Cyber Security Institute Validate ID: FqpvhwEsmpTLKtAgI5qV
Investigate an unauthorised TCP port scan
Date: 29/12/2020 Organizer: Mossé Cyber Security Institute Validate ID: 1n28ZtcczezfqgniS8x0
Dump the RAM of a Windows machine
Date: 22/12/2020 Organizer: Mossé Cyber Security Institute Validate ID: K2qMvjUk9HrItmNVlfN1
Retrieve networking data stored in memory from a Windows memory dump
Date: 22/12/2020 Organizer: Mossé Cyber Security Institute Validate ID: pWkyy1EkUfy2pOvRoPTP