BEGIN:VCALENDAR
VERSION:2.0
PRODID:Data::ICal 0.24
BEGIN:VEVENT
DESCRIPTION:   'Title: Master Class: Delivering a New Construct in Advanced
  Volatile\n   Memory Analysis for Fun and Profit\n   When: Saturday\, Aug 
 13\, 09:00 - 12:59 PDT\n   Where: Harrah's - Ely (Workshops) - [1]Map\n\n 
   SpeakerBio:Solomon Sonya \, Director of Cyber Operations Training\n   So
 lomon Sonya (@Carpenter1010) is the Director of Cyber Operations\n   Train
 ing at a large organization. He has a background in software\n   developme
 nt\, malware analysis\, covert channels\, steganography\,\n   distributed 
 computing\, computer hacking\, information protection\n   paradigms\, and 
 cyber warfare. He received his Undergraduate Degree in\n   Computer Scienc
 e and has Master’s degrees in Computer Science and\n   Information Syste
 m Engineering. Before becoming Director of Cyber\n   Operations Training\,
  he was a university Computer Science Assistant\n   Professor of Computer 
 Science and Research Director. Solomon’s\n   current research includes c
 omputer system exploitation\, cyber threat\n   intelligence\, digital fore
 nsics\, and data protection.\n\n   Solomon's previous keynote and conferen
 ce engagements include:\n   BlackHat USA\, SecTor Canada\, Hack in Paris\,
  France\, HackCon Norway\,\n   ICSIS – Toronto\, ICORES Italy\, BruCon B
 elgium\, CyberCentral –\n   Prague and Slovakia\, Hack.Lu Luxembourg\, S
 hmoocon DC\, BotConf -\n   France\, DerbyCon Kentucky\, SkyDogCon Tennesse
 e\, HackerHalted Georgia\,\n   Day-Con Ohio\, and TakeDownCon Connecticut\
 , Maryland\, and Alabama\,\n   AFCEA – Colorado Springs.\n\n   Twitter: 
 [2]@Carpenter1010\n\n   Description:\n   Malware continues to advance in s
 ophistication. Well-engineered\n   malware can obfuscate itself from the u
 ser and the OS. Volatile memory\n   is the unique structure malware cannot
  evade. I have engineered a new\n   construct for memory analysis and a ne
 w open-source tool that\n   automates memory analysis\, correlation\, and 
 user-interaction to\n   increase investigation accuracy\, reduce analysis 
 time and workload\,\n   and better detect malware presence from memory. Th
 is workshop\n   introduces a new visualization construct that creates the 
 ability to\n   interact with memory analysis artifacts. We will cover how 
 to\n   conducted advanced memory analysis utilizing this brand new tool th
 at\n   will greatly enhance the analysis process. Additionally\, we will l
 earn\n   how to use new Data XREF and System Manifest features in this\n  
  workshop. Data XREF provides an index and memory context detailing how\n 
   your search data is coupled with processes\, modules\, and events\n   ca
 ptured in memory. The System Manifest distills the analysis data to\n   cr
 eate a new memory analysis snapshot and precise identification of\n   mali
 cious artifacts detectable from malware execution especially\n   useful fo
 r exploit dev and malware analysis! This talk is perfect if\n   you have c
 onducted memory analysis before and understand the pain it\n   is to condu
 ct this type of analysis by hand. In this workshop\, we will\n   work with
  a new revolutionary tool to automate\, correlate\, and enrich\n   memory 
 analysis saving you hours of analysis time. This work shop\n   exposes par
 ticipants to capture-the-flag memory analysis challenges\n   utilizing the
  new Xavier Memory Analysis Framework and concludes with\n   a culminating
  capstone exercise at the end. Participants will walk\n   away with advanc
 ed memory analysis capabilities including how to\n   recognize and handle 
 various forms of advance code injection and\n   rootkit hooking techniques
  from computer memory.\n\n   Materials\n         Just a laptop with Virtua
 lBox installed. I will provide the\n         memory images with all tools 
 configured ready for the workshop.\n\n   Prereq\n         None\n\n   '\n\n
    1. https://defcon.outel.org/consolidated_page.html#Harrahs\n   2. https
 ://twitter.com/Carpenter1010\n\n\n
DTEND:20220813T195900Z
DTSTART:20220813T160000Z
LOCATION:WS - Harrah's - Ely (Workshops)
SUMMARY:Master Class: Delivering a New Construct in Advanced Volatile Memor
 y Analysis for Fun and Profit
END:VEVENT
END:VCALENDAR
