no |
title |
author |
magazine |
year |
volume |
issue |
page(s) |
type |
1 |
Advances in volatile memory forensics
|
Schatz, Bradley |
|
2017 |
20 |
C |
p. 1- 1 p. |
article |
2 |
Contents List
|
|
|
2017 |
20 |
C |
p. iii- 1 p. |
article |
3 |
Editorial Board
|
|
|
2017 |
20 |
C |
p. i- 1 p. |
article |
4 |
Live transportation and RAM acquisition proficiency test
|
Schramp, R. |
|
2017 |
20 |
C |
p. 44-53 10 p. |
article |
5 |
Memory forensics: The path forward
|
Case, Andrew |
|
2017 |
20 |
C |
p. 23-33 11 p. |
article |
6 |
Modern windows hibernation file analysis
|
Sylve, Joe T. |
|
2017 |
20 |
C |
p. 16-22 7 p. |
article |
7 |
Obtaining forensic value from the cbWndExtra structures as used by Windows Common Controls, specifically for the Editbox control
|
Bridge, Adam |
|
2017 |
20 |
C |
p. 54-60 7 p. |
article |
8 |
Scanning memory with Yara
|
Cohen, Michael |
|
2017 |
20 |
C |
p. 34-43 10 p. |
article |
9 |
Whitelisting system state in windows forensic memory visualizations
|
Lapso, Joshua A. |
|
2017 |
20 |
C |
p. 2-15 14 p. |
article |