Difference between revisions of "Physical memory"

From Forensics Wiki
Jump to: navigation, search
 
 
(4 intermediate revisions by 2 users not shown)
Line 1: Line 1:
Physical memory is the Random Access Memory, or RAM, used by the computer. By [[Tools:Memory_Imaging]] the physical memory, the actions of the computer can be analyzed.
+
'''Physical memory''' is the '''Random Access Memory''', or '''RAM''', used by the computer. By [[Tools:Memory_Imaging|imaging]] the physical memory, the volatile state of the computer system can be preserved for later analysis. The contents of memory include the code and data, of the operating system and of the programs running on the computer.
 +
 
 +
== See also ==
 +
* [[Tools:Memory Imaging]]
 +
* [[Memory analysis]]

Latest revision as of 16:54, 14 January 2009

Physical memory is the Random Access Memory, or RAM, used by the computer. By imaging the physical memory, the volatile state of the computer system can be preserved for later analysis. The contents of memory include the code and data, of the operating system and of the programs running on the computer.

See also