Chair: 
Andrew White (Dell Secureworks)

Windows Memory Forensics: Detecting (un)intentionally hidden injected Code by examining Page Table Entries Paper

Frank Block Andreas Dewald

Inception: Virtual Space in Memory Space in Real Space -- Memory Forensics of Immersive Virtual Reality with the HTC Vive Paper

Peter Casey Rebecca Lindsay-Decusati Ibrahim Baggili (University of New Haven) Frank Breitinger (University of New Haven)