Understanding Memory Address Translation
I read pages 10-12 in The Art of Memory Forensics more times than I care to admit before I began to understand address translation. Here’s a slide I made for class that might be helpful to you.
Here is the scenario from the book:
Memory sample: ENG-USTXHOU-148