Article ID | Journal | Published Year | Pages | File Type |
---|---|---|---|---|
4955649 | Digital Investigation | 2017 | 10 Pages |
Abstract
The content of Random Access Memory (RAM) of a computer contains forensically relevant information. However, actually acquiring it can be challenging. This article describes a proficiency test performed by several forensic laboratories and their strategies for acquiring the memory from a reference system. The proficiency test covers the full examination chain from physical crime scene to data analysis.
Keywords
Related Topics
Physical Sciences and Engineering
Computer Science
Computer Networks and Communications
Authors
R. Schramp,