Top Posters
Since Sunday
Home Q & A Board Science-Related Homework Help Forensic Science
New Topic  
billyhilly billyhilly
wrote...
Go to Answer
Posts: 479
Rep: 11 0
4 years ago

Why is it that most conventional applications are incapable of copying live memory from a computer system?



▸ They're not incapable. It's easy to capture memory.

▸ Because memory is constantly shifting. The mere fact that you are copying the memory causes it to change.

▸ Because direct access to system memory requires a kernel-mode procedure call. Most applications only have user-mode access.

▸ Because system memory is not part of the regular file system.
Textbook 
Digital Archaeology: The Art and Science of Digital Forensics

Digital Archaeology: The Art and Science of Digital Forensics


Edition: 1st
Author:
Read 193 times
1 Reply
Replies
Answer verified by a subject expert
coltonf1coltonf1
wrote...
#1
Posts: 392
Rep: 42 0
4 years ago
Sign in or Sign up in seconds to unlock everything for free
More solutions for this book are available here
1

Related Topics

billyhilly Author
wrote...

4 years ago
I appreciate what you did here, answered it right Smiling Face with Open Mouth
annielin111
wrote...

Yesterday
Helped a lot
linlinlin
wrote...

2 hours ago
Thanks for your help!!
New Topic      
Quick Reply
Explore
Post your homework questions and get free online help from our incredible volunteers
  1256 People Browsing
Start New Topic Take the Tour CoursesNew Study Tools Topics Trending Browse by Textbook
Related Images
  
 272
  
 185
  
 300
Your Opinion
Where do you get your textbooks?
Votes: 372
Previous poll results: How often do you eat-out per week?