May 31, 2023, 3:41 p.m. | /u/QueenofHearts796

Computer Forensics www.reddit.com

Hi all,

This question has been endlessly asked but I have a sort of a delicate case on my hand and the custodian somehow left their laptop turned on.
Naturally, I wanted to look into doing a memory dump since the PC is encrypted or we might find something interesting there.

How can I acquire the RAM data without re-booting the PC and how recommended is it if I want to perform a deletion analysis? PC is a windows 10 …

acquisition case computerforensics data doing encrypted find laptop memory memory acquisition question sort

Information Security Engineers

@ D. E. Shaw Research | New York City

Technology Security Analyst

@ Halton Region | Oakville, Ontario, Canada

Senior Cyber Security Analyst

@ Valley Water | San Jose, CA

Computer and Forensics Investigator

@ ManTech | 221BQ - Cstmr Site,Springfield,VA

Senior Security Analyst

@ Oracle | United States

Associate Vulnerability Management Specialist

@ Diebold Nixdorf | Hyderabad, Telangana, India