Windows physical memory analysis

keydet89 · 2006-03-07T18:03:58Z

I was wondering if anyone is doing any work in this area…specifically, analyzing dumps of Windows physical memory (ie, RAM) made using dd.exe.I'm familiar with some of the work that has gone on already, particularly via the DFRWS 2005 Memory Challenge, as well as what Andreas Schuster has released recently (I've blogged on this already). What I'm trying to find is anyone else who's looking at this…Thanks,Harlanhttp//windowsir.blogspot.com

Page 2 / 2 Prev

General (Technical, Procedural, Software, Hardware etc.)

Last Post by keydet89 19 years ago

12 Posts

5 Users

0 Reactions

1,423 Views

RSS

keydet89

(@keydet89)

Famed Member

Joined: 21 years ago

Posts: 3568

Topic starter 14/03/2006 7:43 pm

FYI…my blog post on this topic was mentioned in the 11 Mar Cyberspeak podcast.

ReplyQuote

keydet89

(@keydet89)

Famed Member

Joined: 21 years ago

Posts: 3568

Topic starter 16/03/2006 9:04 pm

All,

I've posted an update to my blog
http//windowsir.blogspot.com/2006/03/windows-physical-memory-analysis-pt-ii.html

Comments welcome.

Harlan

ReplyQuote

Page 2 / 2 Prev

Android Forensics

I have conducted a logical and partial extraction of a ...

By SgtAndroid , 2 days ago
Article: The Balance Between Digital Forensic Examiners And Digital Evidence Technicians: Expertise Vs. Efficiency

Can digital forensic labs cut backlogs without cutting ...

By Zoe , 3 days ago
Prefetch Question

Hello All, I have a question regarding Windows prefet...

By Forensic_Tester , 4 days ago

8 Forums
15.7 K Topics
92.3 K Posts
229 Online
41.1 K Members

Forum Icons: Forum contains no unread posts Forum contains unread posts

Topic Icons: Not Replied Replied Active Hot Sticky Unapproved Solved Private Closed