Slides from Part 1 Slides from Part 2

Slides from the training

These volumes are now also called Diagnomicon!

The new Volume 14 brings the total number of books to 16.

Slides from the training

This training introduces unified memory dump analysis pattern language for Windows, Linux, and Mac OS X using WinDbg, GDB, and LLDB for exercises. It includes 3 training courses:

Some software components are innocent victims of other component coding mistakes or deliberate subversion and some start as a part of crimeware and malware but eventually become victims themselves (they crash, hang, spike, leak, are dumped, subverted, etc.) This training pack introduces novel pattern languages for the unified malware and victimware analysis by using behavioral and structural analysis patterns.

This training introduces novel static and dynamic malware analysis pattern languages for security researchers, system and network administrators, digital forensics and malware analysts. It includes 2 training courses, 2 seminar transcripts, and a pattern reference: