论文信息 - Live forensics: diagnosing your system without killing it first - 字舞流文

Live forensics: diagnosing your system without killing it first

Live forensics gathers data from running systems, providing additional contextual information that is not available in a disk-only forensic analysis.

Frank Adelstein | F. Adelstein

[1] Dan Farmer,et al. Forensic Discovery , 2004 .

[2] Eoghan Casey,et al. Digital Evidence and Computer Crime , 2000 .

[3] G. Richard,et al. Breaking the Performance Wall: The Case for Distributed Digital Forensics , 2004 .

[4] Brian D. Carrier,et al. File System Forensic Analysis , 2005 .