Forensic Strategies for Revealing Memory Artifacts in IoT Devices

Abstract

Forensics of Ram plays an important role when used in the field of digital forensics, during the examination of Memory to identify signs of unauthorized or unusual activities within computer systems. This area has gained significant attention because it allows for the recovery of fleeting data that typically disappears when a system is powered down, thus helping investigators piece together the sequence of events that led to security breaches. Recent developments in memory forensics have focused on improving the methods used for acquiring and analyzing memory. This paper seeks to assess the effectiveness of different memory forensic tools and techniques, particularly in their application to malware detection and the extraction of evidence. It wraps up by proposing a framework aimed at enhancing memory forensic practices, addressing current shortcomings in the field, and outlining potential research avenues to strengthen memory analysis in increasingly complex digital landscapes.