Site Glossary

The collection of a system’s memory (RAM) for forensic analysis. RAM can contain running process information, decrypted content, chat fragments, network artifacts, and sometimes encryption material; results depend on timing and system activity.