Volatile Memory Acquisition via Warm Boot Memory Survivability

摘要

As with other areas of digital forensics the validity and in some cases the sheer possibility of media analysis depends upon successfully acquisition of data from the media. The analysis of acquired Random Access Memory has been an active area of recent research. This paper demonstrates a USB based method of memory acquisition invoked via a system reboot. The method does not depend upon the operating system type or version.