Christian Wojner released his The Wow-Effect slide deck cert.at/downloads/papers/wow… <- awesome breakdown about what is redirected #DFIR
1
5
@keydet89 @corey_harrell To frustrate analysts who don't know how to deal with 64-bit code?

Mar 18, 2013 · 1:59 PM UTC

2
Replying to @hal_pomeranz
@keydet89 @hal_pomeranz examples in book: Kernel code on 64bit OS has 2 b 64bit, plug-ins & injected code has 2 b 64bit in 64bit process
Replying to @hal_pomeranz
@hal_pomeranz @keydet89 Just came across this. Analysts aren't the only ones dealing with WoW issues codelaughs.blogspot.com/2011…