OSDA
OffSec Defense Analyst (OSDA)
Osda Memory Forensics CategoryEnglish
Exam overviewPractice session
Which piece of forensic evidence in Windows Memory indicates a reflectively-loaded PE (manual map) bypassing Event 7 (ImageLoad)?
Loading your practice session…