Concepedia

Windows Memory Forensics

Windows Memory Forensics is a specialized branch of digital forensic analysis that involves the acquisition, preservation, and examination of volatile memory (RAM) from Windows-based systems to identify, extract, and interpret forensic artifacts uniquely characteristic of system state, running processes, network connections, and potential malicious activity specific to the Windows operating system.

33

Publications

981

Citations

71

Authors

33

Institutions

Publications per year

2017–2026

11

Parents

Publications

33

The VAD tree: A process-eye view of physical memory

Brendan Dolan-Gavitt · Digital Investigation · 2007 · 91 citations · Full text

, , +14

Forensic analysis of the Windows registry in memory

Brendan Dolan-Gavitt · Digital Investigation · 2008 · 90 citations · Full text

, , +17

Fileless malware threats: Recent advances, analysis approach through memory forensics and research challenges

İlker Kara · Expert Systems with Applications · 2022 · 75 citations

, , +17

The impact of Microsoft Windows pool allocation strategies on memory forensics

Andreas Schuster · Digital Investigation · 2008 · 60 citations · Full text

, , +17

Windows operating systems agnostic memory analysis

James S. Okolica, Gilbert L. Peterson · Digital Investigation · 2010 · 49 citations · Full text

, , +13

1–5 of 33

Authors

71

  1. RJ
    Ricardo J. Rodríguez

    Universidad de Zaragoza, Spain

    3 publications · 40 citations

    3

    h-index

  2. DU
    Daniel Uroz

    Universidad de Zaragoza, Spain

    2 publications · 23 citations

    2

    h-index

  3. MD
    Mourad Debbabi

    Concordia University, Canada

    2 publications · 82 citations

    2

    h-index

  4. GL
    Gilbert L. Peterson

    U.S. Air Force Institute of Technology, United States

    2 publications · 74 citations

    2

    h-index

  5. AS
    Andreas Schuster

    German Centre for Cardiovascular Research, Germany

    2 publications · 91 citations

    2

    h-index

1–5 of 71

Institutions

33

  1. Friedrich-Alexander-Universität Erlangen-Nürnberg

    Erlangen, Germany

    3 h-index

    7 publications

    246 citations

  2. Concordia University

    Montreal, Canada

    2 h-index

    5 publications

    212 citations

  3. Mitre (United States)

    Bedford, United States

    2 h-index

    2 publications

    181 citations

  4. Shandong University

    Jinan, China

    2 h-index

    6 publications

    124 citations

  5. Universidad de Zaragoza

    Zaragoza, Spain

    2 h-index

    4 publications

    58 citations

  6. U.S. Air Force Institute of Technology

    Dayton, United States

    2 h-index

    4 publications

    148 citations

  7. University of Sulaimani

    Sulaymaniyah, Iraq

    1 h-index

    2 publications

    30 citations

  8. Islamic University of Madinah

    Medina, Saudi Arabia

    1 h-index

    2 publications

    30 citations

1–8 of 33

Venues

  1. Digital Investigation

    18 publications · 663 citations

    15

    h-index

  2. 3

    h-index

  3. Journal of Forensic Sciences

    JOFS · 1 publications · 19 citations

    1

    h-index

  4. 1

    h-index

  5. Mobile Information Systems

    1 publications · 15 citations

    1

    h-index

1–5