The cold boot attack: Can it be used for forensic memory acquisition?

by Richard Carbone

"The purpose of this technical memorandum is to examine the technical characteristics behind the cold boot attack technique and to understand when and how this technique should be applied to the field of computer forensic investigations. Upon thorough examination of the technique, the authors highlight its advantages, drawbacks, applicability and appropriateness for use in the acquisition of computer memory contents…"

Read more (Forensic Focus Articles/Papers)