× Didn't find what you were looking for? Ask a question
Top Posters
Since Sunday
g
3
3
2
J
2
p
2
m
2
h
2
s
2
r
2
d
2
l
2
a
2
New Topic  
rizumidancer rizumidancer
wrote...
Posts: 507
Rep: 6 0
4 years ago

You are one of the first to arrive on a scene and you are asked to perform live memory capture on a machine reporting 4GB of RAM. Upon completion, the size of your actual image file is closer to 5GB. What happened? Did you mess up the memory capture?



▸ Yes

▸ No. The way a computer system works is to report only available memory. Memory in use is not reported.

▸ No. The 4GB reported is RAM. The utility you used to capture system memory also was able to capture some of the device cache memory on the system.

▸ No. Most Windows machines "reserve" approximately 20% of system memory for its own use.
Textbook 
Digital Archaeology: The Art and Science of Digital Forensics

Digital Archaeology: The Art and Science of Digital Forensics


Edition: 1st
Author:
Read 70 times
1 Reply

Related Topics

Replies
wrote...
4 years ago
No. The 4GB reported is RAM. The utility you used to capture system memory also was able to capture some of the device cache memory on the system.
New Topic      
Explore
Post your homework questions and get free online help from our incredible volunteers
  1133 People Browsing
 142 Signed Up Today
Related Images
  
 296
  
 78143
  
 229
Your Opinion
Which industry do you think artificial intelligence (AI) will impact the most?
Votes: 352