Live transportation and RAM acquisition proficiency test. (March 2017)

• Record Type: Journal Article
• Authors: Schramp, R.
• Is Part Of: Digital investigation. Volume 20(2016)
• Page Start: 44
• Page End: 53
• Publication Date: 2017-03
• Subjects: Digital forensics -- Proficiency test -- RAM acquisition -- Cold boot attack -- BIOS; Forensic sciences -- Data processing -- Periodicals; Criminal investigation -- Data processing -- Periodicals; 363.250285
• DOI: 10.1016/j.diin.2017.02.006
• Languages: English
• ISSNs: 1742-2876

Abstract

Abstract: The content of Random Access Memory (RAM) of a computer contains forensically relevant information. However, actually acquiring it can be challenging. This article describes a proficiency test performed by several forensic laboratories and their strategies for acquiring the memory from a reference system. The proficiency test covers the full examination chain from physical crime scene to data analysis.