Matches in SemOpenAlex for { <https://semopenalex.org/work/W1499842983> ?p ?o ?g. }
Showing items 1 to 72 of
72
with 100 items per page.
- W1499842983 abstract "Due to the ever increasing growth rate of malwares, Memory Forensics has become unavoidable in a cyber crime investigation. This is because physical memory may contain crucial information that is available nowhere in the system hard disk. Memory Forensics deals with collection of forensically sound evidence from physical memory content of Suspect's system. This is a fast growing and challenging field in computer forensics where a live forensic methodology is adopted in order to acquire physical memory content. Analysis of the collected memory dump is very difficult due to the complex data structures in it, especially in Windows ×64 systems. Also, the complexity involved in 64-bit address translation makes the analysis tougher. This translation can be done only after finding an artifact called Directory Table Base (DTB). Even though there are few methods available for finding DTB, none is efficient for adopting in a memory analysis tool. In this paper, a novel methodology for finding DTB in a 64-bit Windows system is described in detail. The paper also explains algorithms for retrieving forensically relevant information like running processes and its associated details from physical memory dump collected from Windows7 × 64 machines." @default.
- W1499842983 created "2016-06-24" @default.
- W1499842983 creator A5007569014 @default.
- W1499842983 creator A5042227994 @default.
- W1499842983 creator A5044950476 @default.
- W1499842983 date "2014-12-01" @default.
- W1499842983 modified "2023-09-26" @default.
- W1499842983 title "A novel methodology for windows 7 × 64 memory forensics" @default.
- W1499842983 cites W1786071038 @default.
- W1499842983 cites W1969228310 @default.
- W1499842983 cites W1977457952 @default.
- W1499842983 cites W1998566143 @default.
- W1499842983 cites W2010376606 @default.
- W1499842983 cites W2040774316 @default.
- W1499842983 cites W2047088220 @default.
- W1499842983 cites W2115107160 @default.
- W1499842983 cites W2126818466 @default.
- W1499842983 cites W3143644130 @default.
- W1499842983 doi "https://doi.org/10.1109/iccic.2014.7238400" @default.
- W1499842983 hasPublicationYear "2014" @default.
- W1499842983 type Work @default.
- W1499842983 sameAs 1499842983 @default.
- W1499842983 citedByCount "4" @default.
- W1499842983 countsByYear W14998429832015 @default.
- W1499842983 countsByYear W14998429832016 @default.
- W1499842983 countsByYear W14998429832020 @default.
- W1499842983 countsByYear W14998429832021 @default.
- W1499842983 crossrefType "proceedings-article" @default.
- W1499842983 hasAuthorship W1499842983A5007569014 @default.
- W1499842983 hasAuthorship W1499842983A5042227994 @default.
- W1499842983 hasAuthorship W1499842983A5044950476 @default.
- W1499842983 hasConcept C111919701 @default.
- W1499842983 hasConcept C136085584 @default.
- W1499842983 hasConcept C176649486 @default.
- W1499842983 hasConcept C41008148 @default.
- W1499842983 hasConcept C50747538 @default.
- W1499842983 hasConcept C556601545 @default.
- W1499842983 hasConcept C84418412 @default.
- W1499842983 hasConceptScore W1499842983C111919701 @default.
- W1499842983 hasConceptScore W1499842983C136085584 @default.
- W1499842983 hasConceptScore W1499842983C176649486 @default.
- W1499842983 hasConceptScore W1499842983C41008148 @default.
- W1499842983 hasConceptScore W1499842983C50747538 @default.
- W1499842983 hasConceptScore W1499842983C556601545 @default.
- W1499842983 hasConceptScore W1499842983C84418412 @default.
- W1499842983 hasLocation W14998429831 @default.
- W1499842983 hasOpenAccess W1499842983 @default.
- W1499842983 hasPrimaryLocation W14998429831 @default.
- W1499842983 hasRelatedWork W124823771 @default.
- W1499842983 hasRelatedWork W1485838250 @default.
- W1499842983 hasRelatedWork W1535498888 @default.
- W1499842983 hasRelatedWork W1550458109 @default.
- W1499842983 hasRelatedWork W1977457952 @default.
- W1499842983 hasRelatedWork W2003738882 @default.
- W1499842983 hasRelatedWork W2068661019 @default.
- W1499842983 hasRelatedWork W2229662347 @default.
- W1499842983 hasRelatedWork W2307789772 @default.
- W1499842983 hasRelatedWork W2374453284 @default.
- W1499842983 hasRelatedWork W2381929843 @default.
- W1499842983 hasRelatedWork W2383434551 @default.
- W1499842983 hasRelatedWork W2386873815 @default.
- W1499842983 hasRelatedWork W242136043 @default.
- W1499842983 hasRelatedWork W2579276500 @default.
- W1499842983 hasRelatedWork W2765343310 @default.
- W1499842983 hasRelatedWork W2783242968 @default.
- W1499842983 hasRelatedWork W2941983747 @default.
- W1499842983 hasRelatedWork W3151296350 @default.
- W1499842983 hasRelatedWork W88487748 @default.
- W1499842983 isParatext "false" @default.
- W1499842983 isRetracted "false" @default.
- W1499842983 magId "1499842983" @default.
- W1499842983 workType "article" @default.