ABSTRACT

Memory forensics refers to finding and extracting forensic artifacts from a computer’s physical memory. is section explains the importance and capabilities of memory forensics and the tools used to support incident response and malware analysis.