Difference between pages "FreeBSD" and "Memory analysis"
From Forensics Wiki
(Difference between pages)
m |
|||
| Line 1: | Line 1: | ||
| − | ''' | + | '''Memory Analysis''' is the science of using a [[Tools:Memory_Imaging|memory image]] to determine information about running programs, the [[operating system]], and the overall state of a computer. Because the analysis is highly dependent on the operating system, we have broken it into subpages: |
| − | + | * [[Windows Memory Analysis]] | |
| + | * [[Linux Memory Analysis]] | ||
| + | * [[FreeBSD Memory Analysis]] | ||
| − | + | == See Also == | |
| − | + | ||
| − | [[ | + | * [[Tools:Memory_Imaging]] |
| + | |||
| + | == Weblinks == | ||
| + | |||
| + | * [http://www.blackhat.com/presentations/bh-federal-06/BH-Fed-06-Burdach/bh-fed-06-burdach-up.pdf Mariusz Burdach: Finding Digital Evidence In Physical Memory] (PDF) | ||
| + | * [https://www.usenix.org/events/usenix05/tech/freenix/full_papers/movall/movall.pdf Paul Movall, Ward Nelson, Shaun Wetzstein: Linux Physical Memory Analysis] (PDF) | ||
Revision as of 22:23, 6 March 2007
Memory Analysis is the science of using a memory image to determine information about running programs, the operating system, and the overall state of a computer. Because the analysis is highly dependent on the operating system, we have broken it into subpages:
