I’m studying security, and I would like to know: in Windows or Unix based OS environment, is there a way for anything (programs or user with some knowledge) to copy all the content of the computer’s memory?
My worry is about a hacker get my decrypted data loaded in memory. And how to avoid it.
The hacker may be the user himself.
On Windows you can generate a crash dump that will contain nearly all memory (if not all memory) if you configure the system to generate a “Complete memory dump”:
Then you just need to cause a bugcheck.
The nice thing about dealing with a crash dump file is that the Debugging Tools for Windows (and other tools) know how to parse a lot of information out of the files.