DFIRCON APT Malware & Memory Challenge
The memory image contains real APT malware launched against a test system.Your job? Find it.
The object of our challenge is simple: Download the memory image and attempt to answer the questions. To successfully submit for the contest, all answers must be attempted. Each person that correctly answers 3 of the 5 questions will be entered into a drawing to win a FREE Simulcast seat at DFIRCON Monterey this March. The contest ends on January 31st, 2014 and we will announce the winner on February 3rd, 2014. Good luck!
Win a free Simulcast Seat at DFIRCON Monterey - http://dfir.to/DFIR-CON by downloading the memory image
SANS expanded the Reverse-Engineering Malware course (FOR610) to include a day's worth of capture-the flag malware analysis challenges. The challenges are built upon the NetWars tournament platform and are designed to reinforce the skills learned earlier in the course by experimenting with real-world malware. You can get a sneak peak at the new experience.
Through July 11, 2013 you can receive a 11" 128GB MacBook Air (just-announced newest model), Toshiba Satellite U925T-S2120 Ultrabook Convertible, or an $850 discount when you register and pay for a qualifying *vLive or OnDemand course!
Through July 11, 2013 you can receive a 11" 128GB MacBook Air (just-announced newest model), Toshiba Satellite U925T-S2120 Ultrabook' Convertible, or an $850 discount when you register and pay for a qualifying* vLive or OnDemand course!
To take advantage of this offer, enter one of the following discount codes at checkout:
0613_MBAIR (MacBook Air)
0613_TOSH (Toshiba Satellite Ultrabook)
0613_850 ($850 Discount)
Qualifying OnDemand courses include:
FOR408: Computer Forensic Investigations - Windows In-Depth
The 2013 Digital Forensics & Incident Response Summit & Training, taking place in Austin, TX is fast approaching.
*** SANS is offering a one-time discount for the DFIR Summit & Training to government employees (e.g., federal, state, local, DoD).This offer reduces the Summit registration fee from $1,995 to $795 when purchased in conjunction with a full priced course. The discount is available for a limited time only, on a first come, first served basis. Please register athttps://www.sans.org/registration/register.php?conferenceid=30107with the code DFIRGOV
***There is also a 10% off code DFIR
Why should you attend the DFIR Summit ...