default search action
Digital Investigation, Volume 20
Volume 20, March 2017
- Bradley L. Schatz, Michael Cohen:
Advances in volatile memory forensics. 1 - Joshua A. Lapso, Gilbert L. Peterson, James S. Okolica:
Whitelisting system state in windows forensic memory visualizations. 2-15 - Joe Sylve, Lodovico Marziale, Golden G. Richard III:
Modern windows hibernation file analysis. 16-22 - Andrew Case, Golden G. Richard III:
Memory forensics: The path forward. 23-33 - Michael Cohen:
Scanning memory with Yara. 34-43 - R. Schramp:
Live transportation and RAM acquisition proficiency test. 44-53 - Adam Bridge:
Obtaining forensic value from the cbWndExtra structures as used by Windows Common Controls, specifically for the Editbox control. 54-60
manage site settings
To protect your privacy, all features that rely on external API calls from your browser are turned off by default. You need to opt-in for them to become active. All settings here will be stored as cookies with your web browser. For more information see our F.A.Q.