Scholarlink

<p>Memory forensics helps the forensic investigator to detect any unusual activity. In this paper, we have discussed memory forensics and how to dump the content of primary memory RAM (Random Access Memory) using the FTK (Forensic Tool Kit) Imager tool. This memory dump helps to detect unusual activity in the systems, and we have also demonstrated the detection of hacker activities (find the traces of ping commands initiated by a hacker, get the traces of credentials used by the hacker) in the memory dump. Our proposed memory forensics methodology is based on the Identification, Prevention, Analysis, Documentation, and Presentation methodology. Our proposed technique will help law enforcement agencies, government organisations, and cyber forensic investigators to solve high-level cybercrimes.</p>

错误：搜索内容不能为空，请输入英文关键词
错误：关键词超出字数限制，请精简
高级检索

Memory forensic: detecting unusual intrusion activity in dump of RAM memory using FTK imager

  • 期刊论文

  • 发表日期：

    2025年5月22日

查看全文
  • Bishwajeet Pandey,
  • Amit Kumar,
  • Deepak Bhaskar Acharya,
  • Pushpanjali Pandey,
  • W. A. W. A Bakar

摘要

Memory forensics helps the forensic investigator to detect any unusual activity. In this paper, we have discussed memory forensics and how to dump the content of primary memory RAM (Random Access Memory) using the FTK (Forensic Tool Kit) Imager tool. This memory dump helps to detect unusual activity in the systems, and we have also demonstrated the detection of hacker activities (find the traces of ping commands initiated by a hacker, get the traces of credentials used by the hacker) in the memory dump. Our proposed memory forensics methodology is based on the Identification, Prevention, Analysis, Documentation, and Presentation methodology. Our proposed technique will help law enforcement agencies, government organisations, and cyber forensic investigators to solve high-level cybercrimes.