Top Posters
Since Sunday
g
3
2
J
2
p
2
m
2
h
2
s
2
r
2
d
2
l
2
a
2
s
2
Home Q & A Board Science-Related Homework Help Forensic Science
New Topic  
billyhilly billyhilly
wrote...
Go to Answer
Posts: 479
Rep: 11 0
4 years ago

Why is it that most conventional applications are incapable of copying live memory from a computer system?



▸ They're not incapable. It's easy to capture memory.

▸ Because memory is constantly shifting. The mere fact that you are copying the memory causes it to change.

▸ Because direct access to system memory requires a kernel-mode procedure call. Most applications only have user-mode access.

▸ Because system memory is not part of the regular file system.
Textbook 
Digital Archaeology: The Art and Science of Digital Forensics

Digital Archaeology: The Art and Science of Digital Forensics


Edition: 1st
Author:
Read 189 times
1 Reply
Replies
Answer verified by a subject expert
coltonf1coltonf1
wrote...
#1
Posts: 392
Rep: 42 0
4 years ago
Sign in or Sign up in seconds to unlock everything for free
More solutions for this book are available here
1

Related Topics

billyhilly Author
wrote...

4 years ago
This site is awesome
larrybrads
wrote...

Yesterday
Thanks
aznzergs
wrote...

2 hours ago
Helped a lot
New Topic      
Quick Reply
Explore
Post your homework questions and get free online help from our incredible volunteers
  727 People Browsing
 118 Signed Up Today
Start New Topic Take the Tour CoursesNew Study Tools Topics Trending Browse by Textbook
Live Chat
Related Images
  
 218
  
 750
  
 222
Your Opinion
How often do you eat-out per week?
Votes: 79
Previous poll results: Which industry do you think artificial intelligence (AI) will impact the most?