What Malware Leaves Behind - Analyzing Forensic Traces of Ransomware

Explore the forensic investigation techniques used to analyze digital traces left behind by ransomware attacks in this 20-minute conference talk by Ankshita Maunthrooa from Cooper. Learn how to identify and examine the digital footprints that malware creates on infected systems, understand the specific forensic artifacts that ransomware generates during its execution, and discover methodologies for reconstructing attack timelines and identifying attack vectors. Gain insights into the technical aspects of ransomware behavior from a forensic perspective, including file system modifications, registry changes, network communications, and encryption patterns that can be leveraged during incident response and criminal investigations.