


default search action
Digital Investigation, Volume 20
Volume 20, March 2017
- Bradley L. Schatz, Michael Cohen:

Advances in volatile memory forensics. 1 - Joshua A. Lapso

, Gilbert L. Peterson, James S. Okolica
:
Whitelisting system state in windows forensic memory visualizations. 2-15 - Joe Sylve, Lodovico Marziale, Golden G. Richard III

:
Modern windows hibernation file analysis. 16-22 - Andrew Case

, Golden G. Richard III
:
Memory forensics: The path forward. 23-33 - Michael Cohen:

Scanning memory with Yara. 34-43 - R. Schramp

:
Live transportation and RAM acquisition proficiency test. 44-53 - Adam Bridge:

Obtaining forensic value from the cbWndExtra structures as used by Windows Common Controls, specifically for the Editbox control. 54-60

manage site settings
To protect your privacy, all features that rely on external API calls from your browser are turned off by default. You need to opt-in for them to become active. All settings here will be stored as cookies with your web browser. For more information see our F.A.Q.


Google
Google Scholar
Semantic Scholar
Internet Archive Scholar
CiteSeerX
ORCID














