Article ID Journal Published Year Pages File Type
4955649 Digital Investigation 2017 10 Pages PDF
Abstract

The content of Random Access Memory (RAM) of a computer contains forensically relevant information. However, actually acquiring it can be challenging. This article describes a proficiency test performed by several forensic laboratories and their strategies for acquiring the memory from a reference system. The proficiency test covers the full examination chain from physical crime scene to data analysis.

Related Topics
Physical Sciences and Engineering Computer Science Computer Networks and Communications
Authors
,