Skip to content

WinPmem

Velocidex / Rekall (Open Source) • Windows 3 0

About & Primary Utility

WinPmem provides a kernel-mode driver to directly access Windows physical memory and export it to standard dump formats (raw or AFF4), making it one of the most stable open-source RAM acquisition options and compatible with analysis tools like Volatility.

Articles, Tips & Tricks (0)

No articles published yet for this software.