Surviving Digital Forensics: RAM Extraction Fundamentals

Vulnerability management is the continuous process of finding weaknesses in systems, deciding which ones matter in context, fixing or mitigating them, and confirming the fix.

A penetration test is an authorised, scoped attempt by a skilled tester to exploit weaknesses in a system the way an attacker would, ending in a report the owner can act on.

Incident response is the prepared, practised process by which an organisation detects a security incident, contains it, removes the cause, recovers, and learns from what happened.

IP addressing is the scheme that gives every interface on a network a numeric address, with IPv4's four-byte addresses now supplemented by IPv6's much larger space, and with private ranges reserved for use inside networks that reach the internet through translation.

Subnetting divides an address block into smaller networks by choosing how many leading bits identify the network, written as a prefix length or a subnet mask, so that each subnet has its own range of host addresses and its own routing entry.

Routing is how packets move between networks: each router holds a table of known destinations and the next hop toward each, learned by configuration or by a protocol, and forwards each packet to the most specific match.

Serverless computing runs your code only while an event is calling it: the provider conjures an execution environment on demand, throws it away afterwards, and charges for work performed instead of for capacity sitting idle.

A container is an application packaged together with the libraries and configuration it needs, run as an isolated process on a host that is already switched on, so the same package behaves the same way on a laptop, in a build pipeline and in production.

Object storage keeps every file as a self-contained object (the bytes, a unique key and some metadata) inside a flat bucket you read and write over HTTP, with no drive to mount and no directory tree underneath it.