Presentation Slides (youtube)
Andrew Case is a senior incident response handler with experience conducting numerous large-scale investigations that span enterprises and industries.
Andrew’s previous experience includes penetration tests, source code audits, and binary analysis. Andrew is the co-developer of Registry Decoder, a National Institute of Justice funded forensics application, as well as a developer on the Volatility memory analysis framework. He also co-authors the highly popular book “The Art of Memory Forensics”