Top Posters
Since Sunday
Home Q & A Board Science-Related Homework Help Forensic Science
New Topic  
billyhilly billyhilly
wrote...
Go to Answer
Posts: 479
Rep: 11 0
4 years ago

Why is it that most conventional applications are incapable of copying live memory from a computer system?



▸ They're not incapable. It's easy to capture memory.

▸ Because memory is constantly shifting. The mere fact that you are copying the memory causes it to change.

▸ Because direct access to system memory requires a kernel-mode procedure call. Most applications only have user-mode access.

▸ Because system memory is not part of the regular file system.
Textbook 
Digital Archaeology: The Art and Science of Digital Forensics

Digital Archaeology: The Art and Science of Digital Forensics


Edition: 1st
Author:
Read 194 times
1 Reply
Replies
Answer verified by a subject expert
coltonf1coltonf1
wrote...
#1
Posts: 392
Rep: 42 0
4 years ago
Sign in or Sign up in seconds to unlock everything for free
More solutions for this book are available here
1

Related Topics

billyhilly Author
wrote...

4 years ago
this is exactly what I needed
sakoon
wrote...

Yesterday
You make an excellent tutor!
deathDoUsPart
wrote...

2 hours ago
This site is awesome
New Topic      
Quick Reply
Explore
Post your homework questions and get free online help from our incredible volunteers
  1281 People Browsing
Start New Topic Take the Tour CoursesNew Study Tools Topics Trending Browse by Textbook
Related Images
  
 177
  
 282
  
 178
Your Opinion
Which country would you like to visit for its food?
Votes: 204
Previous poll results: Which industry do you think artificial intelligence (AI) will impact the most?