Windows Memory Forensics Tools [update]
SANS recently published a good summary of Windows memory forensics acquisition and analysis tools. It’s a good compilation
Tag: memory analysis
Forensic memory dumping issues
Arne Vidstrom from ntsecurity.nu wrote an interesting paper about problems with forensic RAM dumps from Windows XP. His summary on this topic
windows memory analysis
Andreas Schuster recently published on his blog two interesting articles about process memory reconstruction. He describes how to