Catching the ghost: how to discover ephemeral evidence with Live RAM analysis
Oleg Afonin and Yuri Gubanov, [email protected]
© Belkasoft Research, 2013
Belkador Dali. “Losing volatile Evidence”.
All rights reserved.
Ephemeral Evidence
Until very recently, it was a standard practice for European law enforcement agencies to approach running computers with a “pull-the-plug”