Volatile Expert Pt. 2 Category: forensics Author: canopus Description Forensics tough guy huh? Let's see how you do... Part 2: What is the virtual and physical offsets of the process with PID=1576? ie: ECSC{0xaaaa:0xbbbb} Author: canopus