3. Deeper research never hurts!

8. Memory dumps contain personal information, but… how personal?

9. Memory Forensics grabs the data at the lowest level: (most) malware cannot hide!

12. Processes Threads Modules Handles Registry Apihooks Services UserAssist Shellbags ShimCache Event Logs Registry (again) Timeline

18. Memoryze: Live analysis

27. Come Visit Us in the Microsoft Solutions Experience! Look for Datacenter and Infrastructure Management TechExpo Level 1 Hall CD For More Information Windows Server 2012 R2 http://technet.microsoft.com/en-US/evalcenter/dn205286 Microsoft Azure http://azure.microsoft.com/en-us/ System Center 2012 R2 http://technet.microsoft.com/en-US/evalcenter/dn205295 Azure Pack http://www.microsoft.com/en-us/server- cloud/products/windows-azure-pack

28. www.microsoft.com/learning http://microsoft.com/msdn http://microsoft.com/technet http://channel9.msdn.com/Events/TechEd