Blue Screen Of the Death is Dead.

Presented at Black Hat USA 2010, July 28, 2010, 3:15 p.m. (75 minutes).

This talk is introducing MoonSols Windows Memory Toolkit aims at being the ultimate memory and crash dump acquisition and conversion tool for Windows. Including live acquisition on Windows of Microsoft crash dumps, the conversion of hibernation file into crashdump, and even to get a crashdump of a running VMWare Virtual Machine without rebooting it and without any BSOD!

Presenters:

• Matthieu Suiche

Links:

• https://www.blackhat.com/html/bh-us-10/bh-us-10-archives.html#Suiche
• https://media.blackhat.com/bh-us-10/presentations/Suiche/BlackHat-USA-2010-Suiche-Blue-Screen-of-the-Death-is-dead-slides.pdf
• https://media.blackhat.com/bh-us-10/whitepapers/Suiche/BlackHat-USA-2010-Suiche-Blue-Screen-of-the-Death-is-dead-wp.pdf

Similar Presentations:

• BSidesLV 2015 / Yes, you too can perform daring acts of Live Acquisition.
• Black Hat USA 2019 / Paging All Windows Geeks – Finding Evil in Windows 10 Compressed Memory