Resources

Pattern-Driven Memory Dump Analysis

http://community.citrix.com/blogs/citrite/dmitryv

Memory Dump and Trace Analysis: A Unified Pattern Approach

http://www.debuggingexperts.com/memory-dump-trace-analysis-unified-pattern-approach

Advanced Software Debugging Reference

http://www.forensicanalysis.org/advanced-software-debugging-reference

This slide has links for further study including a presentation with full transcript comments about pattern-driven memory dump analysis I delivered 2 years ago and a full case study from Debugging Experts Magazine.

Note: I was planning to release volume 5 before this presentation but I couldn't. Should be published by the end of this month or in early April. Volume 6 is scheduled by the end of this year.