When Windows takes a nap and leaves you evidence: Inside hiberfil.sys
Hiberfil.sys is one of those Windows artifacts every examiner should know about. It can contain a near-complete capture of system memory but is also tricky to collect and parse.
Category: Featured Resources
Reclaim time in your digital investigations with Magnet One: Part 3 – Collaborate with ease
The right evidence uncovered at the right time can make or break a case. But investigating, interpreting, and acting on that evidence quickly has become increasingly dependent on how well investigative teams work together.
Revealing hidden data: Full file system extractions uncovered
The examination of iOS and Android devices in digital forensics has become increasingly important in both law enforcement and corporate investigations.
The Art of Detection: Digital Forensics and Intellectual Property Theft
With Magnet VERAKEY and Magnet ARTIFACT IQ, investigators can acquire, preserve, and analyze the contents of the full file system.