Scribd
Upload
36 views2 pages

ACF UNIT 3 Memory Forensics

Uploaded by

2114877113giet
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
36 views2 pages

ACF UNIT 3 Memory Forensics

Uploaded by

2114877113giet
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 2

Memory forensics

Memory forensics is forensic analysis of a computer's memory dump. Its primary application
is investigation of advanced computer attacks which are stealthy. Memory
forensics
(sometimes referred to as memory analysis) refers to the analysis of volatile
data in a computer's memory dump. Information security professionals
conduct memory forensics to investigate and identify attacks or malicious
behaviors that do not leave easily detectable tracks on hard drive data.

Memory Forensics Steps


1. Memory Acquisition: This involves acquiring (or dumping) the memory of a
target machine to disk. ...
2. Memory Analysis: After you dump the memory to disk, this step involves
analyzing the dumped memory to find and extract forensic artifacts.
3. What are the benefits of memory forensics?
4. Memory forensics is a branch of computer forensics that deals with the
analysis of volatile data stored in the memory of a computer system. It
can help investigators to uncover evidence of malicious activities, such
as malware infections, rootkits, network connections, encryption keys,
passwords, and hidden processes.
5. Why memory forensics is important in a network forensics case?
6. By analyzing the contents of memory, forensic analysts can identify the
activities of the insider attacker and the data they have accessed or
stolen. Here are some of the most commonly used tools for RAM
capture: Memory Acquisition Tools - These tools capture a snapshot of
a computer's memory
7. What is memory forensics?
8. Memory forensics is forensic analysis of a computer's memory dump. Its
primary application is investigation of advanced computer attacks which
are stealthy enough to avoid leaving data on the computer's hard drive.
Consequently, the memory (RAM) must be analyzed for forensic
information.
9. What are the 4 types of memory?

The 4 Types of Memory: Sensory, Short-Term, Working & Long-Term


The general phases of the forensic process are: the identification of potential
evidence; the acquisition of that evidence; analysis of the evidence; and
production of a report.

What are the three main steps in forensic process?


The process is predominantly used in computer and mobile forensic
investigations and consists of three steps: acquisition, analysis and reporting.
Digital media seized for investigation may become an "exhibit" in legal
terminology if it is determined to be 'reliable'.

What is the 5 step memory process?


Some researchers break down memory into a process that includes five main
stages: encoding, storage, recall, retrieval, and forgetting.

Memory refers to the location of short-term data, while storage refers to the
location of data stored on a long-term basis. Memory is most often referred to
as the primary storage on a computer, such as RAM. Memory is also where
information is processed. It enables users to access data that is stored for a
short time.

In its simplest form, memory refers to the continued process of information


retention over time. It is an integral part of human cognition, since it allows
individuals to recall and draw upon past events to frame their understanding of
and behavior within the present.

You might also like