Question
A forensic examiner captures RAM from a live system. What may be found?
Correct Answer: A
Running processes and active network connections
RAM can contain volatile runtime artifacts.
RAM can contain volatile runtime artifacts.
Running processes and active network connections
RAM can contain volatile runtime artifacts.
RAM can contain volatile runtime artifacts.
Leave a Reply