root@forensics:~$ open_glossary_term
MEMORY FORENSICS
Memory forensics analyzes data captured from volatile memory to identify running processes, network connections, injected code, credentials, or malware traces.
// PROFESSIONAL_DEFINITION
Memory Forensics
Memory forensics analyzes data captured from volatile memory to identify running processes, network connections, injected code, credentials, or malware traces.
It is useful in cyber incidents where live activity may not be fully visible on disk.
Preserve RAM before shutdown when a live compromise is suspected and collection is feasible.
// RELATED_TERMS