How to Deal with Blurriness in Live Forensics: A Case of Study

Abstract

When dealing with live forensics cases, we should modify the volatile memory of the investigated system as little as possible, since it may contain plenty of evidential data. Usually, state-of-the-art live forensics best practices mention very little about how much the volatile memory is affected during a live investigation. As a result, there are only… (More)
DOI: 10.1109/NCM.2009.75

7 Figures and Tables

Cite this paper

@article{Savoldi2009HowTD, title={How to Deal with Blurriness in Live Forensics: A Case of Study}, author={Antonio Savoldi and Paolo Gubian and Isao Echizen}, journal={2009 Fifth International Joint Conference on INC, IMS and IDC}, year={2009}, pages={1865-1871} }