New Memory Forensics Techniques to Defeat Device Monitoring Malware

In this presentation, we present our effort to develop algorithms capable of detecting userland device monitoring malware across all major operating systems. Our efforts led to several Volatility plugins being created that are capable of automatically locating all information about processes that are monitoring hardware devices. We plan to contribute our Volatility additions to the community during Black Hat.
Presented by Andrew Case, Gustavo Moreira, Austin Sellers & Golden Richard
Full Abstract and Presentation Materials: www.blackhat.c...