Hi list, I have a couple of questions that might be stupid but I am pretty new to memory forensics. -Is there a specific reason why the windows operating system would need a page to be marked Execute and Read/write? -IS DKOM used only in Windows OSs? Thanks!