±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 35997
New Yesterday: 0 Visitors: 98

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

graphics card memory

Computer forensics discussion. Please ensure that your post is not better suited to one of the forums below (if it is, please post it there instead!)
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Page 1, 2  Next 
  

azrael
Senior Member
 

Re: graphics card memory

Post Posted: May 07, 08 11:28

- calimelo
Has anyone tried imaging the memory contents of a graphics card. Nowadays they are talking about gigs of memories. Is it possible to get any data from that? As everything is a file in linux, good old dd may work.
Or i am just talking about nonsense.


To the best of my knowledge, the graphics card memory _isn't_ available as a file under Linux. I guess that it would be possible to image it, similarly to main memory, as there are certainly ways to access it directly using APIs. The question is more as to the likelihood of there being anything relevant there that you wouldn't be able to "image" via screen shot ... There are gigs of RAM, but they aren't used in the same way, often holding texture maps, pre-rendered scenes etc. I don't think that they would be holding pre-viewed images though or images of any useful text. I could be wrong !

Having said that, CUDA and the like may allow other data to be present, so it may be good in future.

Experimentation worth doing ?
_________________
--
Azrael
-- 
 
  

EvaMendis
Member
 

Re: graphics card memory

Post Posted: Sep 22, 14 17:57

Hi,
Your question demand explanation of the concept of Hard Disk Imaging. The hard disk imaging medium of replicating the content present in hard disk . A disk image is created by creating a sector-by-sector copy of the disk.

As disk image contains the content of entire disk,the data can huge and usually omits unused space from the source media and the compress the disk size. hence reducing the storage requirement. For creating a image of hard disk and read the content of graphic card you can use Encase by Guidance Software or FTK Imager by Access Data. These software work very well for creating images of Hard Disk allows us to read the data. These tools may be helpful for you to get your data.  

Last edited by EvaMendis on Sep 23, 14 16:07; edited 2 times in total
 
  

jaclaz
Senior Member
 

Re: graphics card memory

Post Posted: Sep 22, 14 18:40

- EvaMendis

Your question demand explanation of the concept of Hard Disk Imaging. The hard disk
imaging is medium of replicating the content present in hard disk


Very, very good answer Smile , though seemingly to a question that was never asked.

Once you can find the hard disk of the graphic card Shocked , making an image of it should be easy, even without Encase or FTK imager Rolling Eyes .

jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. - 
 
  

EvaMendis
Member
 

Re: graphics card memory

Post Posted: Sep 23, 14 17:24

- jaclaz
- EvaMendis

Your question demand explanation of the concept of Hard Disk Imaging. The hard disk
imaging is medium of replicating the content present in hard disk


Very, very good answer Smile , though seemingly to a question that was never asked.

Once you can find the hard disk of the graphic card Shocked , making an image of it should be easy, even without Encase or FTK imager Rolling Eyes .

jaclaz


Hello Sir,
I agree that my answer was not so convincing.So, I would request you to provide some valuable suggestion. As I am new in this field and I tried best to provide an answer to the question.



--------
Thanks  
 
  

jaclaz
Senior Member
 

Re: graphics card memory

Post Posted: Sep 23, 14 19:09

An answer needs not to be "convincing", a theory or a hypothesis might need to be.

An answer should be:
1) related to the question
and possibly:
2) actually answering the specific question

If the OP question had been:
I don't know if I am using the proper terms, but how can I make an exact copy of a hard disk?


Your answer would have been adequate, though focused on the use of two known Commercial tools, i.e. not providing an answer to the "how", but rather to the "which tools should I use for", and claiming a non-existing connection between data in the graphic card memory and hard disk contents.

The OP asked (in 2008 BTW) a completely different question, related to something in which a hard disk (and consequently hard disk imaging) has NO connection whatsoever, and later updated the thread providing info on a recent research connected to the actual topic which is about GPU RAM.

Carpenter's Example Smile :
Q. How do I join two planks of wood together?
A1. (good) You can use either nails or screws or some glue ...
A2. (yours) Your questions demand explanation of the concept of cutting with scissors. The scope of scissors is to cut materials, usually paper, cloth, tin or similar other thin ones. The cut is created by shearing the materials between the blades of the scissors. A cut is in interruption in the continuity of the material and it usually cut ends cannot be re-joined together easily. To make a cut you can use Stanley or Fiskars scissors. These hardwares work very well to cut through paper, cloth and even tin. These tools may be helpful to get a clean cut.

jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. - 
 
  

Rossetoecioccolato
Member
 

Re: graphics card memory

Post Posted: Sep 27, 14 18:52

www.gmgsystemsinc.com/knttools/

The KnTTools Enterprise Edition has support dumping VRAM and NIC SRAM for about 5 years now. Smile  
 
  

jaclaz
Senior Member
 

Re: graphics card memory

Post Posted: Sep 27, 14 19:44

- Rossetoecioccolato
http://www.gmgsystemsinc.com/knttools/

The KnTTools Enterprise Edition has support dumping VRAM and NIC SRAM for about 5 years now. Smile

Good Smile which are the "select" cards and nic's? Confused
Acquisition of VRAM, SRAM or NVRAM from select video and network adapters.

I mean are they specific models, specific buses, specific brands?

jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. - 
 

Page 1 of 2
Page 1, 2  Next