How to extract forensic artifacts from Linux swap

In order to expand the address space that is effectively usable by a process and to expand the amount of dynamic RAM, modern operating systems use the method known as swapping. In Linux systems this typically shows up in the form of a hard disk partition devoted to this task, but swap areas can be […]

The post How to extract forensic artifacts from Linux swap first appeared on Andrea Fortuna.

Article Link: https://www.andreafortuna.org/2020/12/03/how-to-extract-forensic-artifacts-from-linux-swap/