When compiling the digital evidence review for 2019–2022, the first thought that came to
mind was “we have come so far… we have so far to go”. There has been considerable …

Memory analysis allows forensic investigators to establish a more complete timeline of
system activity using a snapshot of main memory (ie, RAM). Investigators may rely on such …

The first step required to perform any analysis of a physical memory image is the
reconstruction of the virtual address spaces, which allows translating virtual addresses to …

To explore the memory forensic artifacts generated by USB-based attack platforms, we
analyzed two of the most popular commercially available devices, Hak5's USB Rubber …

Memory forensics is a valuable tool for investigating digital crimes. Memory forensics can
provide investigators with critical information about what happened on a computer during an …

The rapid increase of embedded devices and IoT objects is leading to a multiplication of
operating systems and processor architectures, which are generally not supported by …

Memory analysis allows forensic investigators to establish a more complete timeline of
system activity using a snapshot of main memory (ie, RAM). Investigators may rely on such …

When compiling the digital evidence review for 2019–2022, the first thought that came to
mind was “we have come so far… we have so far to go”. There has been considerable …

As malware continues to evolve, infection mechanisms that can only be seen in memory are
increasingly commonplace. These techniques evade traditional forensic analysis, requiring …

Memory forensics is an important branch of digital forensics. Different concepts empower
practitioners to perform deep analysis of potentially compromised systems by dissecting the …