[April] Chapter Meeting ft. Andrew Case – “The Need for Proactive Defense”

Presentation Slides (youtube)

Andrew Case is a senior incident response handler with experience conducting numerous large-scale investigations that span enterprises and industries.

Andrew’s previous experience includes penetration tests, source code audits, and binary analysis. Andrew is the co-developer of Registry Decoder, a National Institute of Justice funded forensics application, as well as a developer on the Volatility memory analysis framework. He also co-authors the highly popular book “The Art of Memory Forensics

Andrew tweets @attrc and blogs at dfir.org