Memory Forensics

• Tradicionalna forenzika vs. Forenzika radne memorije
• Razlike u operacijskim sustavima u pogledu promjenjivih podataka (Volatile Data)
• Snimanje mjesta analize
• Rad sa ugašenim ili upaljenim računalom
• Prikupljanje podataka
• Rad sa kriptiranim diskom
• Dokumentiranje svih uređaja
• Izrada kopija svih nositelja zapisa
• Dokumentiranje svih koraka
• Izraditi izvještaje o provedenoj digitalno forenzičkoj istrazi radne memorije
• Nema nastave

1. analyze the RAM
2. Identify regular processes in the working memory
3. Analyzing the contents of the working memory to the existence of a virus
4. Combine storage and analysis tools
5. Self-evaluate procedures for storing data from computer memory
6. Create reports on the digital forensic investigation of the work memory
7. evaluate RAM analysis tools

Required reading

• EC-Council Press,Computer Forensics: Investigating File and Operating Systems, Wireless Networks and Storage, EC-Council Press, 9781305883482, 2016
  Geetha,Combating Security Breaches and Criminal Activity in the Digital Sphere ,IGI Global, 978-1522501930,2016
  Dr. Philip Polstra,Windows Forensics,Pentester Academy, 2016
  1.Cameron H. Malin, Eoghan Casey, James M. Aquilina,Malware Forensics Field Guide for Linux Systems, Syngress, 978-1597494700, 2014