Blurriness in live forensics: An introduction

Communications in Computer and Information Science

Volumn 36, Issue , 2009, Pages 119-126

  Savoldi, Antonio ^a   Gubian, Paolo ^a  

^a UNIVERSITY OF BRESCIA   (Italy)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER FORENSICS;

COMPUTER-BASED SYSTEM; DIGITAL CRIME; EXCHANGE PRINCIPLES; LIVE FORENSICS; NETWORK CONNECTION; RUNNING SYSTEMS; SPECIFIC ACTIVITY; SYSTEM MEMORY; UNCERTAINTY; VOLATILE MEMORY;

DIGITAL STORAGE;

EID: 67649983534     PISSN: 18650929     EISSN: None     Source Type: Book Series    
DOI: 10.1007/978-3-642-02633-1_16     Document Type: Conference Paper

References (7)

1. Carrier, B., Grand, F.: A Hardware-Based Memory Acquisition Procedure for Digital Investigations. Digital Investigation 1(1), 50-60 (2004)
2. Chisum, W., Turvey, B.: Evidence Dynamics: Locard's Exchange Principle and Crime Reconstruction. Journal of Behavioral Profiling 1(1) (2000)
3. Savoldi, A., Gubian, P.: Volatile Memory Collection and Analysis for Windows Mission-Critical Computer Systems. International Journal Digital Crime and Forensics 1(3) (2009)
4. Garner, G.M.: Forensics Acquisition Utilities (2008), http://www.gmgsystemsinc.com/fau/
5. Helix 3: Helix 3 - Incident Response, Electronic Discovery, Computer Forensics Live CD (2008), http://www.e-fense.com/helix/
6. rfc3227: Guidelines for Evidence Collection and Archiving (2002), http://www.ietf.org/rfc/rfc3227.txt
7. Schatz, B.: BodySnatcher: Towards Reliable Volatile Memory Acquisition by Software. In: 7th annual Digital Forensics Research Workshop, pp. 126-134 (2007)