Physical memory

From ForensicsWiki
Revision as of 10:40, 1 July 2015 by Schramp (Talk | contribs) (Add link to page on Memory Imaging (The tools page is split into 2 pages now))

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

Physical memory is the Random Access Memory, or RAM, used by the computer. By imaging the physical memory, the volatile state of the computer system can be preserved for later analysis. The contents of memory include the code and data, of the operating system and of the programs running on the computer.

See also