professor.bike
Understanding Memory Address Translation — Professor Bike
I read pages 10-12 in The Art of Memory Forensics more times than I care to admit before I began to understand address translation. Here’s a slide I made for class that might be helpful to you. Here is the scenario from the book: Memory sample: ENG-USTXHOU-148 https://docs.google.com/file/d/0B_xs