Memory analysis

Memory Analysis is the science of using a memory image to determine information about running programs, the operating system, and the overall state of a computer. Because the analysis is highly dependent on the operating system, we have broken it into subpages:

• Windows Memory Analysis
• Linux Memory Analysis
• FreeBSD Memory Analysis

See Also

• Tools:Memory Imaging

Weblinks

• Mariusz Burdach: Finding Digital Evidence In Physical Memory (PDF)
• Paul Movall, Ward Nelson, Shaun Wetzstein: Linux Physical Memory Analysis (PDF)
• Lest We Remember: Cold Boot Attacks on Encryption Keys (PDF)