Authenticode

On Challenges in Verifying Trusted Executable Files in Memory Forensics

We investigate the limitations that memory forensics imposed to the digital signature verification process of Windows PE signed files, obtained from a memory dump

Daniel Uroz, Ricardo J. Rodríguez