Method for detecting an approximate area occupied by the computer code of a core of an operating system in a memory, said area comprising one or more ranges in said memory, the method comprising: - an iterative method comprising: - a first iteration comprising: - a step of detecting at least one target address (@RI k, @FS j) in said memory; the method being characterized in that said first iteration comprises: - a step of determining an area delimited by a first said target address (@C min) and by a second said target address (@C max); and - at least one second iteration comprising: - a step of dismantling at least one part of the area (Z1, Z2) determined (E30, E70) during the previous iteration; - a step of detecting at least one target address (@C i) pointed to by a computer code instruction included in said at least one part of the dismantled area (Z1, Z2); and - a step of determining an area delimited by a first said target address (@C min) and by a second said target address (@C max) that have been detected during this second iteration; said method being moreover characterized in that a stop condition is checked when no new target address is detected during the last iteration; and in that it comprises: - a step of searching for a complementary memory range starting just after the second target address (@C max) obtained in the last iteration and comprising only computer code; - said approximate area occupied by the computer code in the core of the operating system being delimited by the first target address (@C min) obtained in the last iteration and by the largest address (@MC max) of said complementary memory range. - an iterative method comprising: - a first iteration comprising: - a step of detecting at least one target address (@RI k, @FS j) in said memory; the method being characterized in that said first iteration comprises: - a step of determining an area delimited by a first said target address (@C min) and by a second said target address (@C max); and - at least one second iteration comprising: - a step of dismantling at least one part of the area (Z1, Z2) determined (E30, E70) during the previous iteration; - a step of detecting at least one target address (@C i) pointed to by a computer code instruction included in said at least one part of the dismantled area (Z1, Z2); and - a step of determining an area delimited by a first said target address (@C min) and by a second said target address (@C max) that have been detected during this second iteration; - a step of determining an area delimited by a first said target address (@C min) and by a second said target address (@C max); and - at least one second iteration comprising: - a step of dismantling at least one part of the area (Z1, Z2) determined (E30, E70) during the previous iteration; - a step of detecting at least one target address (@C i) pointed to by a computer code instruction included in said at least one part of the dismantled area (Z1, Z2); and - a step of determining an area delimited by a first said target address (@C min) and by a second said target address (@C max) that have been detected during this second iteration; said method being moreover characterized in that a stop condition is checked when no new target address is detected during the last iteration; and in that it comprises: - a step of searching for a complementary memory range starting just after the second target address (@C max) obtained in the last iteration and comprising only computer code; - said approximate area occupied by the computer code in the core of the operating system being delimited by the first target address (@C min) obtained in the last iteration and by the largest address (@MC max) of said complementary memory range. - a step of searching for a complementary memory range starting just after the second target address (@C max) obtained in the last iteration and comprising only computer code; - said approximate area occupied by the computer code in the core of the operating system being delimited by the first target address (@C min) obtained in the last iteration and by the largest address (@MC max) of said complementary memory range.