Zur Kurzanzeige

dc.rights.licenseAll rights reserveden_US
dc.contributor.advisorDuffany, Jeffrey
dc.contributor.authorde la Cruz Echeandía, José R.
dc.date.accessioned2020-09-21T18:54:20Z
dc.date.available2020-09-21T18:54:20Z
dc.date.issued2012
dc.identifier.citationde la Cruz Echeandía, J.R. (2012). A forensic memory image acquisition protocol based on windows memory analysis [Unpublished manuscript]. Graduate School, Polytechnic University of Puerto Rico.en_US
dc.identifier.urihttp://hdl.handle.net/20.500.12475/749
dc.descriptionDesign Project Article for the Graduate Programs at Polytechnic University of Puerto Ricoen_US
dc.description.abstractComputer Forensics has become an extremely important evidence gathering and analysis field in the modern electronic driven world. Most of the evidence acquired, preserved, processed and analyzed originates from long term storage media. The importance of obtaining a forensic memory image has grown in importance in order to support the evidence analysis and obtain correct and irrefutable results. This project has developed a memory acquisition protocol that provides forensic examiners with the necessary tools to complete a comprehensive investigation. The protocol developed, which is targeted at the acquisition step of the evidence collection process, is based on memory analysis. Including memory as a data source empowers the analyst with context information that can be used to enhance the analysis of evidence extracted from long term storage media. Key Terms - Computer Forensics, Computer Forensics Protocols, Digital Forensics, Memory Analysis.en_US
dc.language.isoenen_US
dc.publisherPolytechnic University of Puerto Ricoen_US
dc.relation.ispartofComputer Engineering;
dc.relation.ispartofseriesWinter-2012;
dc.relation.haspartSan Juanen_US
dc.subject.lcshComputer Programmingen_US
dc.subject.lcshMemory devices (Computers)en_US
dc.subject.lcshDigital forensicsen_US
dc.subject.lcshPolytechnic University of Puerto Rico--Graduate students--Research
dc.titleA Forensic Memory Image Acquisition Protocol Based on Windows Memory Analysisen_US
dc.typeArticleen_US
dc.rights.holderPolytechnic University of Puerto Rico, Graduate Schoolen_US


Dateien zu dieser Ressource

Thumbnail

Das Dokument erscheint in:

Zur Kurzanzeige