MEMORY IMAGE MANIFEST

This manifest identifies the volatile-memory images associated with
the experimental stages of the Master's Project.

T0  CLEAN BASELINE
WIN10_T0_BASELINE.raw

T1  CONTROLLED EXPERIMENT
WIN10_T1_EARLY.raw
WIN10_T1_POST.raw

T2  PRINCIPAL TEMPORAL EXPERIMENT
WIN10_T2_PRE.raw
WIN10_T2_MID.raw
WIN10_T2_POST.raw

T3  SUPPORTING EXPERIMENT
WIN10_T3_POST.raw

NOTE:
The memory images were acquired from the running Windows 10 victim
using WinPmem. The resulting .raw images were approximately 4.5 GB.
SHA-256 integrity values retained in the project evidence are recorded
separately in SHA256_Hashes.txt.
