Skip to content
evidenceevidencedigital2015 Federal TrialLaptop RAM capture begun on October 3Beeson testified that he and an associate began capturing laptop RAM on October 3 and that FMEM crashed the computer during the capture. He said capture continued after a restart, but some unidentified information was permanently lost. He explained that RAM can contain process, network, or malware information without saying those details necessarily appeared in this capture.
← All Evidence
Digital Evidence

Laptop RAM capture begun on October 3

Beeson testified that he and an associate began capturing laptop RAM on October 3 and that FMEM crashed the computer during the capture. He said capture continued after a restart, but some unidentified information was permanently lost. He explained that RAM can contain process, network, or malware information without saying those details necessarily appeared in this capture.

1 proceeding1 mention1 trial

About

Cross-examination questioned the completeness of the captured live computer state; the lost information's contents were unknown and were not shown to support either party's account.

Trial Record (1)