Malware Forensics for Volatile and Nonvolatile Memory in Mobile Devices
Mohammed Moreb · Apress eBooks · 2022
Day after day, malware and malicious programs are spreading continuously, especially for unprotected mobile devices. Mobile device malware can reside in the nonvolatile memory, or it can hide itself behind some process in the RAM, and so, in the latter case, there is no need for any file in the mobile storage to perform its tasks. Mobile memory forensics tasks can help investigators to extract interesting information from the two types of mobile memory, such as detecting some of resident malware and its related details, which in the same time traditional techniques—like antivirus software—either can detect or cannot.