About this document

Forensic Readiness in UEFI Firmware by KF Qiu is a document available to read on EtoBox.

This paper presents UEberForensIcs, a UEFI application designed for forensic memory acquisition from modern computer firmware, enabling cold boot-like memory acquisition. It highlights the importance of forensic readiness in UEFI systems and demonstrates how to integrate forensic software directly into firmware for improved digital investigations. The authors also discuss the architecture, implementation, and evaluation of their system, which facilitates memory analysis without the need for pre-installed to

Author

KF Qiu

Language

EN