Random Access Memory forensics starts with acquiring RAM from a live (turned on) system. There are several ways to collect the contents of RAM from a computer. Almost all of them require Live Data Forensics, a type of forensic practice that deals with computers or devices powered on, and the data is changing.

Thank you to our Members and Patrons, but especially to TheRantingGeek, Roman, Alexis Brignoni, Lorie Hermesdorf, Steven Lorenz, and OkiePioneerWoman! Thank you so much!

To do Live Data Forensics of any kind, you need to know how Random Access Memory works, how it changes, and how your actions on the target system will affect possible evidence in RAM (and on a hard drive).

00:00 Random Access Memory
01:08 Does RAM have a file system?
02:13 What is RAM used for?
02:51 What devices have RAM?
03:54 When is the data in RAM modified?
06:19 When should digital investigators collect RAM?

[ Ссылка ] - 👍 Subscribe for weekly videos

❤️ Get early access and bonus content - [ Ссылка ]

Links:
🚀 5% off FULL COURSE on RAM Acquisition and Analysis ([ Ссылка ])

Related book:
* Practical Malware Analysis ([ Ссылка ])
* Operating System Concepts ([ Ссылка ])

#forensics #infosec #ram
010001000100011001010011011000110110100101100101011011100110001101100101
Get more Digital Forensic Science
👍 Subscribe → [ Ссылка ]
❤️ YT Member → [ Ссылка ]
❤️ Patreon → [ Ссылка ]
🚀 Forensic Courses → [ Ссылка ]

🕸️ Blog → [ Ссылка ]
🤖 Code → [ Ссылка ]
🐦 Follow → [ Ссылка ]
📰 DFIR Newsletter → [ Ссылка ]
010100110111010101100010011100110110001101110010011010010110001001100101

Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License. Please link back to the original video. If you want to use this video for commercial purposes, please contact us first. We would love to see what you are doing.

свернуть