Analysis of Windows memory for forensic investigations
Containing most recently accessed data and information about the status of a computer system, physical memory is one of the best sources of digital evidence. This thesis presents new methods to analyze Windows physical memory of compromised computers for cyber forensics. The thesis includes three di...
| Main Author: | |
|---|---|
| Format: | Others |
| Published: |
2009
|
| Online Access: | http://spectrum.library.concordia.ca/976393/1/MR63196.pdf Hejazi, Seyed Mahmood <http://spectrum.library.concordia.ca/view/creators/Hejazi=3ASeyed_Mahmood=3A=3A.html> (2009) Analysis of Windows memory for forensic investigations. Masters thesis, Concordia University. |