Andrew Case

Andrew Case is an experienced incident response handler and malware analyst with 16.5 years of work experience. He has a strong background in computer forensics, penetration testing, malware analysis, application security, and reverse engineering. Based in Metairie, Louisiana, Andrew has conducted large-scale investigations across enterprises and industries. He is also the co-developer of Registry Decoder, a NIJ funded forensics application, and the developer of the Volatility memory analysis framework. Andrew is also a co-author of the popular and technical forensics analysis book "The Art of Memory Forensics: Detecting Malware and Threats in Windows, Linux, and Mac Memory." He has received recognition for his contributions to the forensics community