🛡️ Security

Core Dump

A file containing the memory contents of a process or system at a point in time, generated on a crash or on demand. In incident response a core dump of an appliance's packet engine preserves injected code, open connections, and session data that a reboot or upgrade would erase.

📚 Deep Dive

Learn Article

How to Preserve Forensic Evidence on a Network Appliance Before You Patch It

A firmware upgrade erases memory, rotates logs, and overwrites the artifacts that prove a breach. A step-by-step capture procedure for appliances, built on CISA's forensic-triage requirement.

intermediate 6 min read

Back to Glossary