±Forensic Focus Partners
±Your Account
Membership:
New Today: 0
New Yesterday: 4
Overall: 27878
Visitors: 76±Forensic Focus Partner Ads
±Latest Articles
· Using SQL as a date/time conversion tool
· Forensics and Bitcoin
· Investigation and Intelligence Framework (IIF) – an evidence extraction model for investigation
· Extracting data from dump of mobile devices running Android operating system
· Development of Digital Forensic Tools on Mobile Device, a Potential Area to Consider?
· Can You Get That License Plate?
· How To Decrypt WeChat EnMicroMsg.db Database?
· A guide to RegRipper and the art of timeline building
· Recovering Evidence from SSD Drives in 2014: Understanding TRIM, Garbage Collection and Exclusions
· FT Cyber Security Summit 2014 – Recap
· Forensics and Bitcoin
· Investigation and Intelligence Framework (IIF) – an evidence extraction model for investigation
· Extracting data from dump of mobile devices running Android operating system
· Development of Digital Forensic Tools on Mobile Device, a Potential Area to Consider?
· Can You Get That License Plate?
· How To Decrypt WeChat EnMicroMsg.db Database?
· A guide to RegRipper and the art of timeline building
· Recovering Evidence from SSD Drives in 2014: Understanding TRIM, Garbage Collection and Exclusions
· FT Cyber Security Summit 2014 – Recap
±Latest Jobs
Back to top
Skip to content
Skip to menu
Back to top
Back to main
Skip to menu
AND wait 35/40 seconds attending the machine after having switched it off , to prevent a ninja
hacker to quickly disassemble the machine and freeze your RAM sticks 
.
icanhascheezburger.fil...-ninja.jpg
Yep, but that would be part of "Windows used memory" and not part of "unused" one.
A similar recent thread:
reboot.pro/topic/17935-wipe-ram/
jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. -
Please define "unused memory" (whilst a Windows NT based OS is running).
jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. -
Wipe Ram
Go to page 1, 2 Next
Wipe Ram
Posted: Fri Dec 28, 2012 7:00 am
Do it have a software to wipe o fill the unused ram in windows?
-
avocadus - Newbie
Re: Wipe Ram
Posted: Tue Jan 01, 2013 9:56 pm
Not sure about a software solution, but there is a very effective hardware solution.
It is the Power button.
Also Windows automatically zeros free memory pages in the background. This is done for security reasons, so that one process doesn't get given data from another process when additional RAM is requested.
Goggle "zero-page thread" and "Demand Zero faults" for details.
It is the Power button.
Also Windows automatically zeros free memory pages in the background. This is done for security reasons, so that one process doesn't get given data from another process when additional RAM is requested.
Goggle "zero-page thread" and "Demand Zero faults" for details.
-
Passmark - Senior Member
Re: Wipe Ram
Posted: Wed Jan 02, 2013 2:15 am
I tryed to load a file in notepad.exe, then close it.
When i inspect hiberfil.sys i see the text again into.
The "zero-page thread" not works when hibernate?
Do it is possible to launch "zero-page thread" via c++ code?
ty.
When i inspect hiberfil.sys i see the text again into.
The "zero-page thread" not works when hibernate?
Do it is possible to launch "zero-page thread" via c++ code?
ty.
-
avocadus - Newbie
Re: Wipe Ram
Posted: Wed Jan 02, 2013 8:26 am
- Passmark
It is the Power button.
AND wait 35/40 seconds attending the machine after having switched it off , to prevent a ninja
hacker to quickly disassemble the machine and freeze your RAM sticks .icanhascheezburger.fil...-ninja.jpg
I tryed to load a file in notepad.exe, then close it.
When i inspect hiberfil.sys i see the text again into.
Yep, but that would be part of "Windows used memory" and not part of "unused" one.
A similar recent thread:
reboot.pro/topic/17935-wipe-ram/
jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. -
-
jaclaz - Senior Member
Re: Wipe Ram
Posted: Wed Jan 02, 2013 1:46 pm
> When i inspect hiberfil.sys
You asked about RAM. The hiberfil.sys file is a file on the disk & not RAM. Although like many files on the hard disk it contains content that was in RAM at some point.
If your real question is how to avoid data in the hiberfil.sys, then you can turn off hibernation.
You might also want to zero the page file via the registry change.
[HKEY_LOCAL_MACHINESystemCurrentControlSetControl Session ManagerMemory Management] "ClearPageFileAtShutdown"=dword:00000001
You asked about RAM. The hiberfil.sys file is a file on the disk & not RAM. Although like many files on the hard disk it contains content that was in RAM at some point.
If your real question is how to avoid data in the hiberfil.sys, then you can turn off hibernation.
You might also want to zero the page file via the registry change.
[HKEY_LOCAL_MACHINESystemCurrentControlSetControl Session ManagerMemory Management] "ClearPageFileAtShutdown"=dword:00000001
-
Passmark - Senior Member
Re: Wipe Ram
Posted: Wed Jan 02, 2013 2:04 pm
Disable hyberation, clear page file, power off pc... I Know!
But i would use hyberation and reset to zero unused memory on the fly when I want.
Do it is not possible?
But i would use hyberation and reset to zero unused memory on the fly when I want.
Do it is not possible?
-
avocadus - Newbie
Re: Wipe Ram
Posted: Wed Jan 02, 2013 2:22 pm
- avocadusDisable hyberation, clear page file, power off pc... I Know!
But i would use hyberation and reset to zero unused memory on the fly when I want.
Do it is not possible?
Please define "unused memory" (whilst a Windows NT based OS is running).
jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. -
-
jaclaz - Senior Member