HITB LAB: Memory Forensics for Cisco IOS

Memory forensics is the next step the forensic community has taken. In this workshop, you can learn memory forensics for Cisco IOS. Learn how to use the Network Appliance Forensic Toolkit with a real Cisco IOS router. There are twenty routers for attendees of this workshop. Come early to secure your spot on a router. You’ll need a laptop to connect to the router (serial console and Ethernet).

NAFT Project: http://blog.didierstevens.com/programs/network-appliance-forensic-toolkit/
Video: https://www.youtube.com/watch?v=-MEnKSeRMy4
Article: http://www.issa.org/resource/resmgr/journalpdfs/feature1212.pdf

Note: Attendees need to bring their own laptop (Windows, OSX or Linux) with USB and Ethernet connection. A serial connection is a plus, but we provide a serial to USB adapter if the laptop has no serial port. We bring 20 Cisco routers for this workshop, so the maximum amount of attendees who can actively participate is 40 (2 attendees per router).