Ivanovich, a forensics investigator, is trying to extract complete information about running processes from a system. Where should he look apart from the RAM and virtual memory?
I think it is correct, however, slack space can also hold information about volatile memory...
From PCGamer.com: Swap files are also a reserved section of disk space that’s used for offloading data from RAM
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Elb
7 months, 2 weeks agodiomaya
1 year, 6 months agodiomaya
1 year, 6 months ago