Good afternoon,
I was just looking at a memory dump that, when compressed, went from 4GB to about 20MB.
Something is odd here, I say. Most of the file is nulls.
The dump was collected with FTK Imager. Does anyone have any opinions on its reliability
as a memory acquisition tool?
Thanks.
-David
Show replies by date