A RAM snapshot is a copy of the contents of a computer system’s RAM at the time it was collected.
RAM snapshots (RAM images) are often used in a digital forensics context.
RAM snapshot
0001-01-01
A RAM snapshot is a copy of the contents of a computer system’s RAM at the time it was collected.
RAM snapshots (RAM images) are often used in a digital forensics context.
Linux Persistence: Startup Scripts
2024-11-10 DFIR CTF linux persistence systemd SysV init startup script
Linux Persistence: Cron
2024-11-10 DFIR CTF linux persistence cron
Linux Persistence: User Accounts
2021-06-27 DFIR linux persistence