{"id":13805,"date":"2024-02-14T05:46:03","date_gmt":"2024-02-14T05:46:03","guid":{"rendered":"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/product\/a-practical-approach-to-malware-analysis-hunting-and-memory-forensics-bkk2024\/"},"modified":"2024-07-27T09:11:30","modified_gmt":"2024-07-27T09:11:30","slug":"a-practical-approach-to-malware-analysis-hunting-and-memory-forensics-bkk2024","status":"publish","type":"product","link":"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/product\/a-practical-approach-to-malware-analysis-hunting-and-memory-forensics-bkk2024\/","title":{"rendered":"A Practical Approach To Malware Analysis, Hunting And Memory Forensics"},"content":{"rendered":"

ATTEND IN-PERSON<\/span><\/strong>: <\/span><\/strong>Onsite in Bangkok, Thailand<\/strong><\/h4>\n
\n
\n
\n

DATE: 26-28 August 2024<\/strong><\/h4>\n<\/div>\n

TIME: 09:00 to 17:00 ICT\/GMT+7<\/strong><\/h4>\n\n\n\n\n\n\n
Date<\/strong><\/td>\nDay<\/strong><\/td>\nTime<\/strong><\/td>\nDuration<\/strong><\/td>\n<\/tr>\n
26 Aug<\/td>\nMonday<\/td>\n0900-17:00 ICT\/GMT+7<\/td>\n8 Hours<\/td>\n<\/tr>\n
27 Aug<\/td>\nTuesday<\/td>\n0900-17:00 ICT\/GMT+7<\/td>\n8 Hours<\/td>\n<\/tr>\n
28 Aug<\/td>\nWednesday<\/td>\n0900-17:00 ICT\/GMT+7<\/td>\n8 Hours<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
\n
This hands-on training teaches concepts, techniques and tools to understand the behavior and characteristics of malware by combining two powerful techniques, malware analysis and memory forensics.<\/h5>\n

Malware analysis and memory forensics are powerful analysis and investigative techniques used in reverse engineering, digital forensics and incident response. Adversaries are becoming more sophisticated and carrying out advanced malware attacks on critical infrastructures, Data Centers, private and public organizations. This makes detecting, responding and investigating such intrusions increasingly critical for information security professionals. Malware analysis and memory forensics have become a must-have skill for fighting advanced malwares, targeted attacks and security breaches.<\/p>\n

This course will introduce attendees to basics of malware analysis,reverse engineering, Windows internals and memory forensics. It will then gradually progress deeper into more advanced concepts of memory forensics.<\/p>\n

This course uses hands-on labs using real world malware samples and infected memory images (Crimewares, APT malwares, Rootkits etc) to help attendees gain better understanding of the subject. The training also shows how these techniques can be incorporated in a sandbox to automate malware analysis. After taking this course attendees will be equipped with skill to analyze, investigate and respond to malware related incidents.<\/p>\n<\/div>\n<\/div>\n

<\/h5>\n

 <\/p>\n

Key Learning Objectives<\/strong><\/h5>\n
    \n
  • How malware and Windows internals work<\/li>\n
  • How to create a safe and isolated lab environment for malware analysis<\/li>\n
  • What are the techniques and tools to perform malware anlaysis<\/li>\n
  • How to perform static analysis to determine the metadata associated with malware<\/li>\n
  • How to perform dynamic analysis of the malware to determine its interaction with process,filesystem, registry and network<\/li>\n
  • How to perform code analysis to determine the malware functionality<\/li>\n
  • How to debug a malware using tools like IDA pro, Ollydbg\/Immunity debugger<\/li>\n
  • What is Memory Forensics and its use in malware and digital investigation<\/li>\n
  • Ability to acquire a memory image from suspect\/infected systems<\/li>\n
  • How to use open source advanced memory forensics framework (Volatility)<\/li>\n
  • Understanding of the techniques used by the malwares to hide from Live forensic tools<\/li>\n
  • Understanding of the techniques used by Rootkits(code injection, hooking etc)<\/li>\n
  • Investigative steps for detecting stealth and advanced malware<\/li>\n
  • How memory forensics helps in malware analysis and reverse engineering<\/li>\n
  • How to incorporate malware analysis and memory forensics in sandbox<\/li>\n
  • How to determine the network and host based indicators (IOC)<\/li>\n
  • Techniques to Hunt Malwares<\/li>\n<\/ul>\n

     <\/p>\n

     <\/p>\n

    \n
    \n
    Students will be provided with:<\/strong><\/h5>\n
      \n
    • Course material<\/li>\n
    • Lab solution material<\/li>\n
    • Videos used in the course<\/li>\n
    • Malware samples used in the course\/labs<\/li>\n
    • Memory Images used in the course\/labs<\/li>\n
    • Custom Scripts<\/li>\n
    • Linux VM (to be opened with VMware Workstation\/Fusion) containing necessary tools and samples<\/li>\n<\/ul>\n

       <\/p>\n

       <\/p>\n

      Agenda <\/strong><\/h5>\n
      Day 1<\/strong><\/h5>\n
      \n

      Introduction to Malware Analysis<\/strong><\/p>\n

        \n
      • What is Malware<\/li>\n
      • What they do<\/li>\n
      • Why malware analysis<\/li>\n
      • Types of malware analysis<\/li>\n
      • Setting up an isolated lab environment<\/li>\n<\/ul>\n

         <\/p>\n

        Static Analysis<\/strong><\/p>\n

          \n
        • Fingerprinting the malware<\/li>\n
        • Extracting strings<\/li>\n
        • Determining File obfuscation<\/li>\n
        • Pattern matching using YARA<\/li>\n
        • Fuzzing hashing & comparison<\/li>\n
        • Understanding PE File characteristics<\/li>\n
        • Disassembly<\/li>\n
        • Hands-on lab exercise involves analyzing a real malware sample<\/li>\n<\/ul>\n

           <\/p>\n

          Dynamic Analysis\/Behavioural analysis<\/strong><\/p>\n

            \n
          • Dynamic Analysis Steps<\/li>\n
          • Understanding Dynamic Analysis tools<\/li>\n
          • Simulating services<\/li>\n
          • Performing Dynamic Analysis<\/li>\n
          • Monitoring process, filesystem, registry, and network activity<\/li>\n
          • Determining the Indicators of compromise (host and network indicators)<\/li>\n
          • Hands-on lab exercise involves analyzing a real malware sample<\/li>\n<\/ul>\n

             <\/p>\n

            \u00a0Automating Malware Analysis(sandbox)<\/strong><\/p>\n

              \n
            • Custom Sandbox Overview<\/li>\n
            • Working of Sandbox<\/li>\n
            • Sandbox Features<\/li>\n
            • Demo – Analyzing malware in the custom sandbox<\/li>\n<\/ul>\n

               <\/p>\n

              Malware Persistence Methods<\/strong><\/p>\n

                \n
              • Run registry key<\/li>\n
              • Scheduled Tasks<\/li>\n
              • Startup Folder<\/li>\n
              • Service<\/li>\n
              • Winlogon registry entries<\/li>\n
              • Image File Execution Options (IFEO)<\/li>\n
              • Accessibility programs<\/li>\n
              • AppInit_DLLs<\/li>\n
              • DLL Search order hijacking<\/li>\n
              • COM Hijacking<\/li>\n
              • Hands-on lab exercise involves analyzing a real malware sample<\/li>\n<\/ul>\n

                 <\/p>\n

                Day 2<\/strong><\/h5>\n
                \n

                Code Analysis<\/strong><\/p>\n

                  \n
                • Code Analysis Overview<\/li>\n
                • Disassembler & Debuggers<\/li>\n
                • Code Analysis Tools<\/li>\n
                • Basics of IDA Pro<\/li>\n
                • Basics of Ollydbg\/x64dbg<\/li>\n
                • Understanding the API calls<\/li>\n
                • Reversing Malware functionalities(Downloader, dropper, keylogger, code injection, HTTP backdoor)<\/li>\n
                • \u00a0Hands-on lab exercise involves analyzing a real malware sample<\/li>\n<\/ul>\n

                   <\/p>\n

                  Introduction to Memory Forensics<\/strong><\/p>\n

                    \n
                  • What is Memory Forensics<\/li>\n
                  • Why Memory Forensics<\/li>\n
                  • Steps in Memory Forensics<\/li>\n
                  • Memory acquisition and tools<\/li>\n
                  • Acquiring memory From physical machine<\/li>\n
                  • Acquiring memory from the virtual machine<\/li>\n
                  • The hands-on exercise involves acquiring the memory<\/li>\n<\/ul>\n

                     <\/p>\n

                    Volatility Overview<\/strong><\/p>\n

                      \n
                    • Introduction to Volatility Advanced Memory Forensics Framework<\/li>\n
                    • Volatility Installation<\/li>\n
                    • Volatility basic commands<\/li>\n
                    • Determining the profile<\/li>\n
                    • Volatility help options<\/li>\n
                    • Running the plugin<\/li>\n<\/ul>\n

                       <\/p>\n

                      Investigating Process<\/strong><\/p>\n

                        \n
                      • Understanding Process Internals<\/li>\n
                      • Process(EPROCESS) Structure<\/li>\n
                      • Process organization<\/li>\n
                      • Process Enumeration by walking the double linked list<\/li>\n
                      • Process relationship (parent-child relationship)<\/li>\n
                      • Understanding DKOM attacks<\/li>\n
                      • Process Enumeration using pool tag scanning<\/li>\n
                      • Volatility plugins to enumerate processes<\/li>\n
                      • Identifying malware process<\/li>\n
                      • Hands-on lab exercise(scenario-based) involves investigating malware infected memory<\/li>\n<\/ul>\n

                         <\/p>\n

                        Investigating Process handles & Registry<\/strong><\/p>\n

                          \n
                        • Objects and handles overview<\/li>\n
                        • Enumerating process handles using Volatility<\/li>\n
                        • Understanding Mutex<\/li>\n
                        • Detecting malware presence using a mutex<\/li>\n
                        • Understanding the Registry<\/li>\n
                        • Investigating common registry keys using Volatility<\/li>\n
                        • Detecting malware persistence<\/li>\n
                        • Hands-on lab exercise(scenario-based) involves investigating malware infected memory<\/li>\n<\/ul>\n

                           <\/p>\n

                          Day 3<\/strong><\/p>\n

                          \n

                          Investigating Network Activities<\/strong><\/p>\n

                            \n
                          • Understanding malware network activities<\/li>\n
                          • Volatility Network Plugins<\/li>\n
                          • Investigating Network connections<\/li>\n
                          • Investigating Sockets<\/li>\n
                          • Hands-on lab exercise(scenario-based) involves investigating malware infected memory<\/li>\n<\/ul>\n

                             <\/p>\n

                            Investigation Process Memory<\/strong><\/p>\n

                              \n
                            • Process memory Internals<\/li>\n
                            • Listing DLLs using Volatility<\/li>\n
                            • Identifying hidden DLLs<\/li>\n
                            • Dumping malicious executable from memory<\/li>\n
                            • Dumping Dll’s from memory<\/li>\n
                            • Scanning the memory for patterns(yarascan)<\/li>\n
                            • Hands-on lab exercise(scenario-based) involves investigating malware infected memory<\/li>\n<\/ul>\n

                               <\/p>\n

                              Investigating User-Mode Rootkits & Fileless Malwares<\/strong><\/p>\n

                                \n
                              • Code Injection<\/li>\n
                              • Types of Code injection<\/li>\n
                              • Remote DLL injection<\/li>\n
                              • Remote Code injection<\/li>\n
                              • Reflective DLL injection<\/li>\n
                              • Hollow process injection<\/li>\n
                              • Demo – Case Study<\/li>\n
                              • Hands-on lab exercise(scenario-based) involves investigating malware infected memory<\/li>\n<\/ul>\n

                                 <\/p>\n

                                Memory Forensics in Sandbox technology<\/strong><\/p>\n

                                  \n
                                • Sandbox Overview<\/li>\n
                                • Integrating Memory Forensics into a sandbox<\/li>\n
                                • Demo – showing the use of memory forensics in a custom sandbox<\/li>\n<\/ul>\n

                                   <\/p>\n

                                  Investigating Kernel-Mode Rootkits<\/strong><\/p>\n

                                    \n
                                  • Understanding Rootkits<\/li>\n
                                  • Understanding Functional call traversal in Windows<\/li>\n
                                  • Level of Hooking\/Modification on Windows<\/li>\n
                                  • Kernel Volatility plugins<\/li>\n
                                  • Hands-on lab exercise(scenario-based) involves investigating malware infected memory<\/li>\n
                                  • Demo – Rootkit Investigation<\/li>\n<\/ul>\n

                                     <\/p>\n

                                    Memory Forensic Case Studies<\/strong><\/p>\n

                                      \n
                                    • Demo – Hunting an APT malware from Memory<\/li>\n<\/ul>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

                                      ATTEND IN-PERSON: Onsite in Bangkok, Thailand DATE: 26-28 August 2024 TIME: 09:00 to 17:00 ICT\/GMT+7 Date Day Time Duration 26 Aug Monday 0900-17:00 ICT\/GMT+7 8 Hours 27 Aug Tuesday 0900-17:00 ICT\/GMT+7 8 Hours 28 Aug Wednesday 0900-17:00 ICT\/GMT+7 8 Hours This hands-on training teaches concepts, techniques and tools to understand the behavior and characteristics of […]<\/p>\n","protected":false},"featured_media":13804,"template":"","meta":{"_acf_changed":false},"product_cat":[61,84,57],"product_tag":[],"class_list":{"0":"post-13805","1":"product","2":"type-product","3":"status-publish","4":"has-post-thumbnail","6":"product_cat-3-day-training","7":"product_cat-bkk-2024","8":"product_cat-in-person","10":"first","11":"outofstock","12":"featured","13":"shipping-taxable","14":"purchasable","15":"product-type-simple"},"acf":[],"yoast_head":"\nA Practical Approach To Malware Analysis, Hunting And Memory Forensics - HITBSecConf2024 - Bangkok<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/product\/a-practical-approach-to-malware-analysis-hunting-and-memory-forensics-bkk2024\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"A Practical Approach To Malware Analysis, Hunting And Memory Forensics - HITBSecConf2024 - Bangkok\" \/>\n<meta property=\"og:description\" content=\"ATTEND IN-PERSON: Onsite in Bangkok, Thailand DATE: 26-28 August 2024 TIME: 09:00 to 17:00 ICT\/GMT+7 Date Day Time Duration 26 Aug Monday 0900-17:00 ICT\/GMT+7 8 Hours 27 Aug Tuesday 0900-17:00 ICT\/GMT+7 8 Hours 28 Aug Wednesday 0900-17:00 ICT\/GMT+7 8 Hours This hands-on training teaches concepts, techniques and tools to understand the behavior and characteristics of […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/product\/a-practical-approach-to-malware-analysis-hunting-and-memory-forensics-bkk2024\/\" \/>\n<meta property=\"og:site_name\" content=\"HITBSecConf2024 - Bangkok\" \/>\n<meta property=\"article:modified_time\" content=\"2024-07-27T09:11:30+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/wp-content\/uploads\/sites\/22\/2024\/02\/Monappa-Training.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"900\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/product\/a-practical-approach-to-malware-analysis-hunting-and-memory-forensics-bkk2024\/\",\"url\":\"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/product\/a-practical-approach-to-malware-analysis-hunting-and-memory-forensics-bkk2024\/\",\"name\":\"A Practical Approach To Malware Analysis, Hunting And Memory Forensics - HITBSecConf2024 - Bangkok\",\"isPartOf\":{\"@id\":\"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/product\/a-practical-approach-to-malware-analysis-hunting-and-memory-forensics-bkk2024\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/product\/a-practical-approach-to-malware-analysis-hunting-and-memory-forensics-bkk2024\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/wp-content\/uploads\/sites\/22\/2024\/02\/Monappa-Training.jpg\",\"datePublished\":\"2024-02-14T05:46:03+00:00\",\"dateModified\":\"2024-07-27T09:11:30+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/product\/a-practical-approach-to-malware-analysis-hunting-and-memory-forensics-bkk2024\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/product\/a-practical-approach-to-malware-analysis-hunting-and-memory-forensics-bkk2024\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/product\/a-practical-approach-to-malware-analysis-hunting-and-memory-forensics-bkk2024\/#primaryimage\",\"url\":\"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/wp-content\/uploads\/sites\/22\/2024\/02\/Monappa-Training.jpg\",\"contentUrl\":\"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/wp-content\/uploads\/sites\/22\/2024\/02\/Monappa-Training.jpg\",\"width\":1200,\"height\":900},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/product\/a-practical-approach-to-malware-analysis-hunting-and-memory-forensics-bkk2024\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Shop\",\"item\":\"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/shop\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"A Practical Approach To Malware Analysis, Hunting And Memory Forensics\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/#website\",\"url\":\"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/\",\"name\":\"HITBSecConf2024 - Bangkok\",\"description\":\"August 26 - 30 @ InterContinental\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"A Practical Approach To Malware Analysis, Hunting And Memory Forensics - HITBSecConf2024 - Bangkok","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/product\/a-practical-approach-to-malware-analysis-hunting-and-memory-forensics-bkk2024\/","og_locale":"en_US","og_type":"article","og_title":"A Practical Approach To Malware Analysis, Hunting And Memory Forensics - HITBSecConf2024 - Bangkok","og_description":"ATTEND IN-PERSON: Onsite in Bangkok, Thailand DATE: 26-28 August 2024 TIME: 09:00 to 17:00 ICT\/GMT+7 Date Day Time Duration 26 Aug Monday 0900-17:00 ICT\/GMT+7 8 Hours 27 Aug Tuesday 0900-17:00 ICT\/GMT+7 8 Hours 28 Aug Wednesday 0900-17:00 ICT\/GMT+7 8 Hours This hands-on training teaches concepts, techniques and tools to understand the behavior and characteristics of […]","og_url":"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/product\/a-practical-approach-to-malware-analysis-hunting-and-memory-forensics-bkk2024\/","og_site_name":"HITBSecConf2024 - Bangkok","article_modified_time":"2024-07-27T09:11:30+00:00","og_image":[{"width":1200,"height":900,"url":"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/wp-content\/uploads\/sites\/22\/2024\/02\/Monappa-Training.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/product\/a-practical-approach-to-malware-analysis-hunting-and-memory-forensics-bkk2024\/","url":"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/product\/a-practical-approach-to-malware-analysis-hunting-and-memory-forensics-bkk2024\/","name":"A Practical Approach To Malware Analysis, Hunting And Memory Forensics - HITBSecConf2024 - Bangkok","isPartOf":{"@id":"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/#website"},"primaryImageOfPage":{"@id":"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/product\/a-practical-approach-to-malware-analysis-hunting-and-memory-forensics-bkk2024\/#primaryimage"},"image":{"@id":"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/product\/a-practical-approach-to-malware-analysis-hunting-and-memory-forensics-bkk2024\/#primaryimage"},"thumbnailUrl":"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/wp-content\/uploads\/sites\/22\/2024\/02\/Monappa-Training.jpg","datePublished":"2024-02-14T05:46:03+00:00","dateModified":"2024-07-27T09:11:30+00:00","breadcrumb":{"@id":"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/product\/a-practical-approach-to-malware-analysis-hunting-and-memory-forensics-bkk2024\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/product\/a-practical-approach-to-malware-analysis-hunting-and-memory-forensics-bkk2024\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/product\/a-practical-approach-to-malware-analysis-hunting-and-memory-forensics-bkk2024\/#primaryimage","url":"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/wp-content\/uploads\/sites\/22\/2024\/02\/Monappa-Training.jpg","contentUrl":"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/wp-content\/uploads\/sites\/22\/2024\/02\/Monappa-Training.jpg","width":1200,"height":900},{"@type":"BreadcrumbList","@id":"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/product\/a-practical-approach-to-malware-analysis-hunting-and-memory-forensics-bkk2024\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/"},{"@type":"ListItem","position":2,"name":"Shop","item":"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/shop\/"},{"@type":"ListItem","position":3,"name":"A Practical Approach To Malware Analysis, Hunting And Memory Forensics"}]},{"@type":"WebSite","@id":"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/#website","url":"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/","name":"HITBSecConf2024 - Bangkok","description":"August 26 - 30 @ InterContinental","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/wp-json\/wp\/v2\/product\/13805"}],"collection":[{"href":"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/wp-json\/wp\/v2\/product"}],"about":[{"href":"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/wp-json\/wp\/v2\/types\/product"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/wp-json\/wp\/v2\/media\/13804"}],"wp:attachment":[{"href":"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/wp-json\/wp\/v2\/media?parent=13805"}],"wp:term":[{"taxonomy":"product_cat","embeddable":true,"href":"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/wp-json\/wp\/v2\/product_cat?post=13805"},{"taxonomy":"product_tag","embeddable":true,"href":"https:\/\/conference.hitb.org\/hitbsecconf2024bkk\/wp-json\/wp\/v2\/product_tag?post=13805"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}