BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.com//bsides-exeter-2026//speaker//QMYFNW
BEGIN:VTIMEZONE
TZID:GMT
BEGIN:STANDARD
DTSTART:20001029T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:GMT
TZOFFSETFROM:+0100
TZOFFSETTO:+0000
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000326T020000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:BST
TZOFFSETFROM:+0000
TZOFFSETTO:+0100
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-bsides-exeter-2026-8E8ZK7@pretalx.com
DTSTART;TZID=GMT:20260425T122000
DTEND;TZID=GMT:20260425T130000
DESCRIPTION:As defenders\, over the last few years we’ve seen a seemingly
  relentless stream of incidents\, vulnerabilities and attack campaigns tar
 geting network edge devices and appliances. Exposed at the edge of our net
 works defending these devices is critical\, but their proprietary and lock
 ed down operating systems mean we often lack the detection and response to
 ols we use every day to quickly triage\, investigate and remediate commodi
 ty server and client operating systems.\n\nBut under the hood\, almost all
  modern network edge devices run some flavour of Linux. Memory collection 
 and analysis on Linux is well supported by both commercial and open source
  tools such as Volatility 3. In this talk I’ll discuss some of the chall
 enges of collecting and analysing memory on Linux-based appliances\, and s
 how how with some creativity (and a little reverse-engineering) you can of
 ten get the same level of visibility and analysis we get on more standard 
 Linux operating systems.\n\nWhether you’re an incident responder\, part 
 of a security team responsible for these devices or a device vendor I’ll
  discuss how you can be better prepared for incidents involving these type
 s of systems and use memory analysis as a part of your investigation.
DTSTAMP:20260501T070549Z
LOCATION:Seminar Room 7
SUMMARY:Open(ish) source: Adventures in edge device memory forensics - Rich
 ard Tuffin
URL:https://pretalx.com/bsides-exeter-2026/talk/8E8ZK7/
END:VEVENT
END:VCALENDAR