Daily Blog #222: Forensic Lunch 1/31/14 - Discussion with Ian Duffy, Andrew Case, and Matthew

Hello Reader,
         We had a very interesting Forensic Lunch this week! This weeks guests:

Ian Duffy, +Ian Duffy , talking about his research into the Microsoft Office compound file format.
You can read Ian's blogs on this topic here: http://forensecurity.blogspot.com/2014/01/microsoft-office-compound-document.html

Andrew Case, +Andrew Case , discussing his work in the memory forensics and Volatility

• The Volatility project page is here: http://code.google.com/p/volatility/
• You can pre-order the memory forensics book here: http://www.amazon.com/gp/product/1118825098/ref=as_li_ss_tl?ie=UTF8&camp=1789&creative=390957&creativeASIN=1118825098&linkCode=as2&tag=malwacookb-20
• You can find out more about Volatility training here: http://volatility-labs.blogspot.com/2013/10/2014-malware-and-memory-forensics.html
• Volatility Community Documentation can be found here: http://code.google.com/p/volatility/wiki/VolatilityDocumentationProject
• You can find out more about Bsides NOLA here: http://www.securitybsides.com/w/page/71231585/BsidesNola2014
• Read the blog analyzing ADD that Andrew talked about here: http://blog.handlerdiaries.com/?p=363

Matthew and I showing the latest changes for this months Beta release of ANJP.

Also Read: Daily Blog #221