log inhelp

 | 

  • If you are citizen of an European Union member nation, you may not use this service unless you are at least 16 years old.

  • You already know Dokkio is an AI-powered assistant to organize & manage your digital files & messages. Very soon, Dokkio will support Outlook as well as One Drive. Check it out today!

View
 

Capturing RAM and Swap files

Page history last edited by Sean Ellis 10 years, 4 months ago

Capturing Ram and Swap - Video 2 (18 minutes)

Capturing RAM and Swap files

 

Lecture Overview:

 

  • Where can you find information on a running computer, capturing ram and virtual memory and extracting information from it:

 

    • Capture memory with FTK Imager - (1:40)
    • Strings command - (6:23, 10:30)
    • PhotoRec - (7:41, 12:02)

 

Download:

 

 

Additional Supporting Material:

 

 

 

 

All Course Lectures  

 

 

Comments (0)

You don't have permission to comment on this page.

Printable version