Although malicious software (malware) has been around since the early days of computers,
the sophistication and innovation of malware has increased over the years. In particular, the …

Main memory analysis plays an increasingly important role in today's digital forensic
analysis. It can be used to retrieve encryption keys or to analyze malware that solely resides …

The results of memory forensics can not only be used as evidence in court but are also
beneficial for analyzing vulnerability and improving security. Thus, memory forensics has …

The collection and analysis of volatile memory is a vibrant area of research in the
cybersecurity community. The ever-evolving and growing threat landscape is trending …

To a great degree, research in memory forensics concentrates on the acquisition and
analysis of kernel-and user-space software from physical memory to date. With the system …

With increased use of forensic memory analysis, the soundness of memory acquisition
becomes more important. We therefore present a black box analysis technique in which …

Memory forensics has gradually moved into the focus of researchers and practitioners alike
in recent years. With an increasing effort to extract valuable information from a snapshot of a …

The acquisition of data from main memory or from hard disk storage is usually one of the first
steps in a forensic investigation. We revisit the discussion on quality criteria for “forensically …

Volatile memory dump and its analysis is an essential part of digital forensics. Among a
number of various software and hardware approaches for memory dumping there are …

Data protection is the process of securing sensitive information from being corrupted,
compromised, or lost. A hyperconnected network, on the other hand, is a computer …