👨🏻💻 Awesome Memory Forensics.
The main task in digital forensics is to collect information, namely, to obtain images of hard drives, RAM and network connection dumps.
• If we talk about RAM analysis, then using such a dump, it is possible to determine which applications were launched during the session, because until a person turned off or rebooted the PC, all the information we are interested in (for example, process data) is stored in RAM.
• To analyze memory dumps, there are many tools that are collected in the repository:
• In addition to tools, you can find a lot of information in the repository in the form of links to manuals, videos, books, presentations and reports.