Open Access
61- https://doi.org/10.1016/j.diin.2006.12.002
Using every part of the buffalo in Windows memory analysis
- Jan 13, 2007
- Digital Investigation
- Jesse D Kornblum
Abstract
Using every part of the buffalo in Windows memory analysis
- # Virtual Addresses
- # Operating System Components
- # Examiner's Ability
- # Address Translation
- # Time Of Imaging
- # Strategy For Translation
- # Method For Translation
- # Data In Image
- # Invalid Pages
- # Invalid Memory
