ATTENTION: The new home of the Digital Forensics Wiki is at https://forensicswiki.xyz/. Yeah, it's a silly name, but it was cheap.
This wiki will be going offline permanently in the near future. An exact date will be announced soon. Thank you for being a part of this community.
If you wish to work on the new forensicswiki, please join the Google Group forensicswiki-reborn

Difference between revisions of "Physical memory"

From ForensicsWiki
Jump to: navigation, search
m
(One intermediate revision by one other user not shown)
Line 1: Line 1:
'''Physical memory''' is the '''Random Access Memory''', or '''RAM''', used by the computer. By [[Tools:Memory_Imaging|imaging]] the physical memory, the actions of the computer can be analyzed.
+
'''Physical memory''' is the '''Random Access Memory''', or '''RAM''', used by the computer. By [[Tools:Memory_Imaging|imaging]] the physical memory, the volatile state of the computer system can be preserved for later analysis.  The contents of memory include the code and data, of the operating system and of the programs running on the computer.
  
 
== See also ==
 
== See also ==
 
* [[Tools:Memory Imaging]]
 
* [[Tools:Memory Imaging]]
* [[Memory_analysis]]
+
* [[Memory analysis]]

Revision as of 21:54, 14 January 2009

Physical memory is the Random Access Memory, or RAM, used by the computer. By imaging the physical memory, the volatile state of the computer system can be preserved for later analysis. The contents of memory include the code and data, of the operating system and of the programs running on the computer.

See also