Data acquisition from volatile memory a memory acquisition tool for Microsoft Windows Vista
Cheong, Choong Wee Vincent
Vidas, Timothy M.
Dinolt, George W.
MetadataShow full item record
The focus of this research is on extracting data from the volatile random access memory (RAM) on a personal computer running Microsoft's Windows Vista operating system, while minimally affecting the existing data. The projected work includes the development of a kernel-mode device driver with the capabilities on one or more versions of Microsoft Windows Vista, a user-mode application that interacts with the driver, usage documentation and outcome of the research. The main objectives of the research is to show the possibility of extracting information from the random access memory using a user mode application (with a suitable driver already installed) and to document the process of Window Vista driver development, so that future works in this area can benefit by putting more effort into specific research rather than configuring a development environment.
Showing items related by title, author, creator and subject.
Bernstein, Raymond F. (Monterey, California. Naval Postgraduate School, 1995-12);This work describes a scaleable, high performance, pipelined, vector processor architecture. Special emphasis is placed on performing fast Fourier transforms with mixed-radix butterfly operations. The initial motivation ...
Ashby, Elton Truxton (Monterey, California. Naval Postgraduate School, 1971);Often, the most time consuming and costly evolution in the development of computer programs and systems is the testing of the programmer's logic. There are many tools and techniques available which aid the programmer in ...
Sanders, Kyle (Monterey, California: Naval Postgraduate School, 2009-06);Debugging is a useful technique in all aspects of software development, including that of operating systems. Because they provide low level interfaces to the hardware, operating systems are particularly difficult to debug. ...