OSForensics
Tool to acquire live memory on 32-bit and 64-bit systems. A dump of an individual process’s memory space or physical memory dump can be done.
- from
- Incident Response
- added
- 2026-10-10
- likes
- 0
similar
-
Belkasoft Live RAM Capturer belkasoft.com
Tiny free forensic tool to reliably extract the entire content of the computer’s volatile memory – even if protected by an active anti-debugging or anti-dumping system.
-
Practical Memory Forensics amazon.com
The definitive guide to practice memory forensics. By Svetlana Ostrovskaya and Oleg Skulkin.
-
GetData Forensic Imager forensicimager.com
Windows based program that will acquire, convert, or verify a forensic image in one of the following common forensic file formats.
-
WindowsSCOPE windowsscope.com
Memory forensics and reverse engineering tool used for analyzing volatile memory offering the capability of analyzing the Windows kernel, drivers, DLLs, and virtual and physical memory.
-
-
Open Computer Forensics Architecture sourceforge.net
Another popular distributed open-source computer forensics framework. This framework was built on Linux platform and uses postgreSQL database for storing data.
Incident Response › IR Tools Collection > Memory Imaging Tools: “Tool to acquire live memory on 32-bit and 64-bit systems. A dump of an individual process’s memory space or physical memory dump can be done.”