ForensicsWiki will continue to operate as it has before and will not be shutting down. Thank you for your continued support of ForensicsWiki.

Memory analysis

From ForensicsWiki
Revision as of 13:37, 20 May 2006 by Jessek (Talk | contribs) (Initial Description)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

Memory Analysis is the science of using a memory image to determine information about running program, the operating system, and the overall state of a computer. Because the analysis is highly dependent on the operating system, we have broken it into subpages:

Windows Memory Analysis

Linux Memory Analysis

FreeBSD Memory Analysis