Memory Analysis

Definitions

1. The examination of volatile system memory to uncover running processes, injected code, credentials, network connections, and other evidence not reliably preserved on disk. Memory analysis is especially important for fileless malware and live compromise investigations.

   In plain English: Studying a computer's memory to find evidence of malicious activity.

   Example: "Disk artifacts were sparse, but memory analysis revealed the injected beacon configuration and stolen Kerberos tickets."

Related Terms

• Computer Emergency Response Team
• Cyber Resilience
• Dwell Time
• Incident Containment
• Incident Forensics
• Incident Playbook
• Incident Triage
• Cloud Forensics
• Import Hash
• Memory Dump