On the public citation graph
Introducing the Temporal Dimension to Memory Forensics
0 signed · 82 inferred · view as graph
Inferred edges come from two machine sources: sweeps of open repository metadata (mostly SSRN and Zenodo), and a bulk OpenAlex citation snapshot. Every row below is labelled with the one it came from. Neither is a complete citation index — absence here is not evidence of absence.
Is this your work? Sign in with ORCID and put your name on the
claims that are yours.
Reference health. See whether every reference in this work resolves to a
known work and none has been retracted — and get a dated CiteStamped
badge you can embed.
What this work says
Outgoing claims: the papers this work cites, builds on, or argues with.
inferredcites →https://doi.org/10.1007/978-3-642-15512-3_16openalex-snapshot
Live and Trustworthy Forensic Analysis of Commodity Production Systems
inferredcites →https://doi.org/10.1007/978-3-642-41284-4_2openalex-snapshot
Hypervisor Memory Forensics
inferredcites →https://doi.org/10.1016/j.diin.2003.12.001openalex-snapshot
A hardware-based memory acquisition procedure for digital investigations
inferredcites →https://doi.org/10.1016/j.diin.2006.06.010openalex-snapshot
Searching for processes and threads in Microsoft Windows memory dumps
inferredcites →https://doi.org/10.1016/j.diin.2006.12.002openalex-snapshot
Using every part of the buffalo in Windows memory analysis
inferredcites →https://doi.org/10.1016/j.diin.2007.06.008openalex-snapshot
The VAD tree: A process-eye view of physical memory
inferredcites →https://doi.org/10.1016/j.diin.2007.06.009openalex-snapshot
BodySnatcher: Towards reliable volatile memory acquisition by software
inferredcites →https://doi.org/10.1016/j.diin.2007.06.010openalex-snapshot
Forensic memory analysis: From stack and code to execution history
inferredcites →https://doi.org/10.1016/j.diin.2008.02.001openalex-snapshot
Persistent systems techniques in forensic acquisition of memory
inferredcites →https://doi.org/10.1016/j.diin.2010.05.006openalex-snapshot
Treasure and tragedy in kmem_cache mining for live forensics investigation
inferredcites →https://doi.org/10.1016/j.diin.2011.06.002openalex-snapshot
A survey of main memory acquisition and analysis techniques for the windows operating system
inferredcites →https://doi.org/10.1016/j.diin.2012.04.005openalex-snapshot
Correctness, atomicity, and integrity: Defining criteria for forensically-sound memory acquisition
inferredcites →https://doi.org/10.1016/j.diin.2013.03.003openalex-snapshot
Hunting in the enterprise: Forensic triage and incident response
inferredcites →https://doi.org/10.1016/j.diin.2013.06.004openalex-snapshot
An evaluation platform for forensic memory acquisition software
inferredcites →https://doi.org/10.1016/j.diin.2013.06.012openalex-snapshot
Anti-forensic resilient memory acquisition
inferredcites →https://doi.org/10.1016/j.diin.2016.01.003openalex-snapshot
Evaluating atomicity, and integrity of correct memory acquisition methods
inferredcites →https://doi.org/10.1016/j.diin.2016.01.004openalex-snapshot
Automatic profile generation for live Linux Memory analysis
inferredcites →https://doi.org/10.1016/j.diin.2016.04.017openalex-snapshot
Detecting objective-C malware through memory forensics
inferredcites →https://doi.org/10.1016/j.diin.2016.12.004openalex-snapshot
Memory forensics: The path forward
inferredcites →https://doi.org/10.1016/j.diin.2017.06.002openalex-snapshot
Linux memory forensics: Dissecting the user space process heap
inferredcites →https://doi.org/10.1016/j.diin.2018.01.013openalex-snapshot
Building stack traces from memory dump of Windows x64
inferredcites →https://doi.org/10.1109/ares.2010.73openalex-snapshot
Recovery of Skype Application Activity Data from Physical Memory
inferredcites →https://doi.org/10.1109/ares.2011.33openalex-snapshot
Recovery of Pidgin Chat Communication Artefacts from Physical Memory: A Pilot Test to Determine Feasibility
inferredcites →https://doi.org/10.1109/msp.2009.43openalex-snapshot
Live Analysis: Progress and Challenges
inferredcites →https://doi.org/10.1109/sp.2011.11openalex-snapshot
Virtuoso: Narrowing the Semantic Gap in Virtual Machine Introspection
inferredcites →https://doi.org/10.1109/tifs.2015.2467356openalex-snapshot
Reliable and Trustworthy Memory Acquisition on Smartphones
inferredcites →https://doi.org/10.1111/1556-4029.12979openalex-snapshot
In‐Depth Analysis of Computer Memory Acquisition Software for Forensic Purposes
inferredcites →https://doi.org/10.1145/1368506.1368510openalex-snapshot
A proposal for an integrated memory acquisition mechanism
inferredcites →https://doi.org/10.1145/1653662.1653730openalex-snapshot
Robust signatures for kernel data structures
inferredcites →https://doi.org/10.1145/1950365.1950398openalex-snapshot
Ensuring operating system kernel integrity with OSck
inferredcites →https://doi.org/10.1145/2857705.2857707openalex-snapshot
Derandomizing Kernel Address Space Layout for Memory Introspection and Forensics
inferredcites →https://doi.org/10.1145/3176258.3176325openalex-snapshot
Secure, Consistent, and High-Performance Memory Snapshotting
inferredcites →https://doi.org/10.14722/ndss.2018.23324openalex-snapshot
"Tipped Off by Your Memory Allocator": Device-Wide User Activity Sequencing from Android Memory Images"
What points at this work
Incoming claims: where this work appears in other papers’ reference lists and arguments.
inferred← citeshttps://doi.org/10.1007/978-3-031-06365-7_1openalex-snapshot
Quantifying Paging on Recoverable Data from Windows User-Space Modules
inferred← citeshttps://doi.org/10.1007/978-3-032-22542-9_18openalex-snapshot
Toward Structured Memory Forensics: A MITRE ATT&CK-Aligned Workflow For Malware Investigation
inferred← citeshttps://doi.org/10.1007/978-981-97-2839-8_23openalex-snapshot
A Detailed Study of Advancements in Digital Forensics
inferred← citeshttps://doi.org/10.1007/s10207-025-00991-8openalex-snapshot
WEFT: a consistent and tamper-proof methodology for acquisition of automatically verifiable forensic web evidence
inferred← citeshttps://doi.org/10.1007/s42979-023-02553-yopenalex-snapshot
Enhancing Reliability During Physical Memory Forensics: Strategies and Practices
inferred← citeshttps://doi.org/10.1016/j.fsidi.2020.300917openalex-snapshot
On Challenges in Verifying Trusted Executable Files in Memory Forensics
inferred← citeshttps://doi.org/10.1016/j.fsidi.2021.301313openalex-snapshot
The evidence beyond the wall: Memory forensics in SGX environments
inferred← citeshttps://doi.org/10.1016/j.fsidi.2022.301343openalex-snapshot
Quantifying data volatility for IoT forensics with examples from Contiki OS
inferred← citeshttps://doi.org/10.1016/j.fsidi.2022.301398openalex-snapshot
Live system call trace reconstruction on Linux
inferred← citeshttps://doi.org/10.1016/j.fsidi.2023.301501openalex-snapshot
Contamination of digital evidence: Understanding an underexposed risk
inferred← citeshttps://doi.org/10.1016/j.fsidi.2025.301864openalex-snapshot
SOLVE-IT: A proposed digital forensic knowledge base inspired by MITRE ATT&CK
inferred← citeshttps://doi.org/10.1016/j.fsidi.2025.301868openalex-snapshot
A scenario-based quality assessment of memory acquisition tools and its investigative implications
inferred← citeshttps://doi.org/10.1016/j.fsidi.2025.301921openalex-snapshot
Uncovering linux desktop espionage
inferred← citeshttps://doi.org/10.1016/j.fsidi.2026.302045openalex-snapshot
LEMON: A universal eBPF-based volatile memory acquisition tool for modern android devices and hardened linux systems
inferred← citeshttps://doi.org/10.1016/j.fsidi.2026.302119openalex-snapshot
I guess it is correct - A survey about acquiring and analyzing main memory
inferred← citeshttps://doi.org/10.1016/j.future.2022.07.002openalex-snapshot
Cloud-BlackBox: Toward practical recording and tracking of VM swarms for multifaceted cloud inspection
inferred← citeshttps://doi.org/10.1016/j.jnca.2022.103494openalex-snapshot
iContainer: Consecutive checkpointing with rapid resilience for immortal container-based services
inferred← citeshttps://doi.org/10.1080/08874417.2023.2270452openalex-snapshot
Spoofed Email Based Cyberattack Detection Using Machine Learning
inferred← citeshttps://doi.org/10.1080/19361610.2022.2161972openalex-snapshot
SAM: A Mechanism to Facilitate Smear-Aware Forensic Analysis of Volatile System Memory
inferred← citeshttps://doi.org/10.1109/icocics58778.2023.10276573openalex-snapshot
Investigating the Impact on Data Recovery in Computer Forensics
inferred← citeshttps://doi.org/10.1109/incowoco68239.2025.11407214openalex-snapshot
A Memory Forensics Approach to Detect Advanced Modular Malware
inferred← citeshttps://doi.org/10.1109/iscs69371.2025.11385965openalex-snapshot
Memory Forensics: Research Gaps, Challenges, and the Road Ahead
inferred← citeshttps://doi.org/10.1111/1556-4029.70362openalex-snapshot
Preserving evidence integrity in full file system extractions: Assessing hash inconsistencies and potential solutions
inferred← citeshttps://doi.org/10.1145/3409289openalex-snapshot
Proactively Identifying Emerging Hacker Threats from the Dark Web
inferred← citeshttps://doi.org/10.1145/3528102openalex-snapshot
In the Land of MMUs: Multiarchitecture OS-Agnostic Virtual Memory Forensics
inferred← citeshttps://doi.org/10.1145/3628600openalex-snapshot
An Experimental Assessment of Inconsistencies in Memory Forensics
inferred← citeshttps://doi.org/10.1145/3664476.3670887openalex-snapshot
Manipulating the Swap Memory for Forensic Investigation
inferred← citeshttps://doi.org/10.1145/3680293openalex-snapshot
Causal Inconsistencies Are Normal in Windows Memory Dumps (Too)
inferred← citeshttps://doi.org/10.1145/3764580openalex-snapshot
Memory Analysis for Malware Detection: A Comprehensive Survey Using the OSCAR Methodology
inferred← citeshttps://doi.org/10.1145/3839565openalex-snapshot
Frankenstein’s RAM: A Simulation Framework for Evaluating Memory Forensic Acquisition Strategies
inferred← citeshttps://doi.org/10.12720/jait.14.5.950-959openalex-snapshot
Live Memory Forensics Investigations: A Comparative Analysis
inferred← citeshttps://doi.org/10.14722/ndss.2023.23398openalex-snapshot
An OS-agnostic Approach to Memory Forensics
inferred← citeshttps://doi.org/10.18239/jornadas_2021.34.22openalex-snapshot
A Review of “On Challenges in Verifying Trusted Executable Files in Memory Forensics”
inferred← citeshttps://doi.org/10.3390/electronics13153026openalex-snapshot
A Comprehensive Literature Review on Volatile Memory Forensics
inferred← citeshttps://doi.org/10.3390/jcp2030028openalex-snapshot
The Evolution of Volatile Memory Forensics
inferred← citeshttps://doi.org/10.34190/iccws.17.1.54openalex-snapshot
Evaluating the Reliability of Android Userland Memory Forensics
inferred← citeshttps://doi.org/10.4018/979-8-3693-0220-0.ch007openalex-snapshot
The Future of Cyber-Crimes and Cyber War in the Metaverse
inferred← citeshttps://doi.org/10.5220/0010603600002998openalex-snapshot
Responding to Living-Off-the-Land Tactics using Just-In-Time Memory Forensics (JIT-MF) for Android
inferred← citeshttps://doi.org/10.70675/39d39f48zbd98z4097za6c0z38c0b0f75653openalex-snapshot
A Zero-Knowledge Approach to Memory Forensics
inferred← citeshttps://doi.org/10.70675/7d58a8e0za008z4cb2z82c7zc7ec033b26adopenalex-snapshot
Advances in memory forensics
Editorial review for independent work. ICSAC — the Institute for Complexity
Science and Advanced Computing — runs a structured editorial panel for researchers
publishing outside journals, and publishes on CiteStamp rails. Submission is free
and goes through ORCID: icsacinstitute.org/submit.