Top Posters
Since Sunday
Home Q & A Board Science-Related Homework Help Forensic Science
New Topic  
billyhilly billyhilly
wrote...
Go to Answer
Posts: 479
Rep: 11 0
4 years ago

Why is it that most conventional applications are incapable of copying live memory from a computer system?



▸ They're not incapable. It's easy to capture memory.

▸ Because memory is constantly shifting. The mere fact that you are copying the memory causes it to change.

▸ Because direct access to system memory requires a kernel-mode procedure call. Most applications only have user-mode access.

▸ Because system memory is not part of the regular file system.
Textbook 
Digital Archaeology: The Art and Science of Digital Forensics

Digital Archaeology: The Art and Science of Digital Forensics


Edition: 1st
Author:
Read 192 times
1 Reply
Replies
Answer verified by a subject expert
coltonf1coltonf1
wrote...
#1
Posts: 392
Rep: 42 0
4 years ago
Sign in or Sign up in seconds to unlock everything for free
More solutions for this book are available here
1

Related Topics

billyhilly Author
wrote...

4 years ago
This helped my grade so much Perfect
tcat
wrote...

Yesterday
Thank you, thank you, thank you!
riptide
wrote...

2 hours ago
Brilliant ツ
New Topic      
Quick Reply
Explore
Post your homework questions and get free online help from our incredible volunteers
  1260 People Browsing
Start New Topic Take the Tour CoursesNew Study Tools Topics Trending Browse by Textbook
Live Chat
Related Images
  
 704
  
 1129
  
 81
Your Opinion
Which of the following is the best resource to supplement your studies:
Votes: 292
Previous poll results: What percentage of nature vs. nurture dictates human intelligence?