by Jamie Levy | Oct 10, 2013 | encase, sampling, volatility, windows
One thing that people may or may not realize is that you can mount memory with EnCase and use Volatility directly against the mounted memory “file”. This can be especially useful for checking your enterprise for infected machines in order to narrow your...
You must be logged in to post a comment.