I lost some notes and i have about 40 minutes before my pc will restart. I know it might be imposible but anyway maybe i will learn something. So the question goes: Is there a RAM trace left by keyboard input that could be recovered in 40 minutes or less. I use Win 7 build 7100. edit: the browser is Chrome, anyone knows how to dump ram RAM? I search but cant find
If you want to see for yourself how impossible this is, download HxD. Go to Extras > Open RAM > chrome.exe > OK, and look around Chrome's memory yourself.
Nope, sorry. The only way you can get that level of persistence from a RAM trace is to cryogenically freeze the RAM, and that's only good for about 20 minutes.
I don't think so, since keyboard presses usually pass by the USB and they are handled by the USB controller in a way that is not predictable. There is not direct mapping between a keyboard and the memory.
If you assume that they are stored somewhere in your RAM you should check all the bytes of used RAM without any clues.. not feasible
You should have used something like a keylogger..