{"id":"W2544541072","doi":"10.1109/passat/socialcom.2011.68","title":"Comparative Analysis of Volatile Memory Forensics: Live Response vs. Memory Imaging","year":2011,"lang":"en","type":"article","venue":"","topic":"Digital and Cyber Forensics","field":"Computer Science","cited_by":40,"is_retracted":false,"has_abstract":true,"ca_institutions":"Concordia University of Edmonton","funders":"Concordia University; Concordia University of Edmonton","keywords":"Computer science; Digital forensics; Resource (disambiguation); Non-volatile memory; Response time; Cache; Digital evidence; Computer security; Data science; Computer hardware; Operating system","routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0003467968,0.0001718737,0.000451783,0.0003511132,0.0000587565,0.00006479087,0.0006837807,0.00003145662,0.0001831704],"category_scores_gemma":[0.00002814614,0.0001412622,0.0002418223,0.001142629,0.0002213575,0.0008366898,0.0003459011,0.00008343112,0.00008666324],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00002683734,"about_ca_system_score_gemma":0.00008146423,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0002827586,"about_ca_topic_score_gemma":0.000127938,"domain_scores_codex":[0.9986331,0.00009209466,0.0003462456,0.0003706181,0.0002995077,0.000258382],"domain_scores_gemma":[0.9985863,0.0001960088,0.0001648936,0.0006876241,0.0002514076,0.0001137736],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"theoretical_or_conceptual","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.003196239,0.001522369,0.03648825,0.00007572451,0.008201976,0.0004034473,0.3036291,0.001375531,0.003780381,0.3453456,0.04487801,0.2511034],"study_design_scores_gemma":[0.001299254,0.0007050334,0.2665398,0.00006411739,0.001119442,0.00002980305,0.007916995,0.5453158,0.1295181,0.04487668,0.001116221,0.00149879],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.5850517,0.0001113622,0.1303807,0.0001638224,0.0003064341,0.0001953913,0.00002159338,0.0002421595,0.2835269],"genre_scores_gemma":[0.97221,0.000001190881,0.02554793,0.0003263852,0.0000115447,0.00000501032,0.000005097688,0.000005122821,0.001887641],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.5439403,"threshold_uncertainty_score":0.5760505,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.02792996290983028,"score_gpt":0.2438497470239563,"score_spread":0.215919784114126,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}