Harald Baier

Frankenstein’s RAM: A Simulation Framework for Evaluating Memory Forensic Acquisition Strategies

Frankenstein is presented, a simulation-based framework that synthesizes a memory dump from a time series of atomic, hypervisor-level ground-truth snapshots under a configurable traversal strategy and bandwidth model and proposes novel page-category priority orderings that cut semantic inconsistencies and Hamming dista...