How long is a file, such as a jpeg, in memory, after the file is closed?
Let's say I open a jpeg file in Windows preview, or Previewer on Mac OS X, then I close the previewer program. How long is that jpeg in RAM? How can I find out, maybe run tests?
I am interested in volatile memory and extraction, especially when files or a whole hard drive is encrypted.