Windows Forensics Cookbook
上QQ阅读APP看书,第一时间看更新

How it works...

Belkasoft Evidence Center parses memory image structure and extracts available data, putting it into corresponding categories. The BelkaCarving options allow the tool to reconstruct fragmented data, for example, images.