March 25, 2008
An important component of computer crime scenes is often the contents of the machine's memory. This week, our ongoing cyberforensics scenario presents an introduction to memory analysis— all the techniques forensic analysts use to capture what's going on in a machine, even in the face of pervasive encryption. If you've ever wondered about the "New School" of memory analysis, or the Live Forensics Evolutionary Tree, or the advantages of hardware-based memory analysis, this episode is for you.