Winpmem v-0.1 rc1 released.

Winpmem is an open source windows memory imager which exposes a raw device with direct physcial memory access.

This tool can be used to allow volatility to run on the raw memory of a live system – with no need to take an image.
Included is a simple user space imaging application using the driver.

Download In here | Read more right here

About these ads