Analysing and Carving MS Word and PDF Files from RAM Images on Windows
In this study, a piece of software has been developed to recover the readable data by carving MS Word and PDF files from the RAM image.String searching, signature scanning, and data carving methods are used in the design of the software.The analysis was performed on a RAM image of 14 GB by using the software that Encoder was developed.The success r