Digital Forensics Researcher, VolatilityAndrew Case is a digital forensics researcher primarily focusing on physical memory analysis. Case has presented his research at conferences including RSA, Black Hat, SOURCE, BSides, OMFW, GFirst and DFRWS. He has also conducted numerous large scale digital investigations and performed incident response handling during many high-profile breaches. His previous experience includes penetration tests, source code audits and binary analysis. He is the co-developer of Registry Decoder, a National Institute of Justice funded application, as well as a core developer on the Volatility project.