Question

what are some of the potential uses in forensic cases for memory?

Memory timelines. Discuss a situation where a timeline might be important within an investigation

Answer 1

The potential uses in forensic cases for memory are that it provides the insights of the network , execute files and and the system running activities because in orde to run anything we must first load the data into the memory and than do the rest of the execution of the program . It also provides the details about the data which was used by the person , which can be anlaysed by the forensic teams to get the information about the insights of the process and the activities . Memory is oftenly storing the some useful information for the person and for the forensic team that can be used by them to frame a person for malpractices.

The memory timeline serves the purpose of determinng when was the memory used and what was time period the data was in the memory and when it was used , so it gives the details of the timing of the process or data usage that can be linked to the timing of the crime and help in adding the evidence for the framing of the person. Situation like a person is attacking a website , here the forensic teams can use the memory timeline details to establish a relation when the attack was being done , what were the processes in the memory and what were the data being used to know whether the person is the attacker or not.