Difference between revisions of "Memory analysis"

From ForensicsWiki
Jump to: navigation, search
(Initial Description)
 
m
Line 1: Line 1:
Memory Analysis is the science of using a [[Tools:Memory_Imaging|memory image]] to determine information about running program, the operating system, and the overall state of a computer. Because the analysis is highly dependent on the operating system, we have broken it into subpages:
+
'''Memory Analysis''' is the science of using a [[Tools:Memory_Imaging|memory image]] to determine information about running programs, the [[operating system]], and the overall state of a computer. Because the analysis is highly dependent on the operating system, we have broken it into subpages:
  
[[Windows Memory Analysis]]
+
* [[Windows Memory Analysis]]
 
+
* [[Linux Memory Analysis]]
[[Linux Memory Analysis]]
+
* [[FreeBSD Memory Analysis]]
 
+
[[FreeBSD Memory Analysis]]
+

Revision as of 14:34, 20 May 2006

Memory Analysis is the science of using a memory image to determine information about running programs, the operating system, and the overall state of a computer. Because the analysis is highly dependent on the operating system, we have broken it into subpages: