Memory Analysis

Showing 1 to 20 of 20 results

F-Response TACTICAL
Featured

F-Response TACTICAL

DFIR Tools
Primary Use Case
Collection / Acquisition
Tool Type
Standalone Tool
Developer
F-Response
F-Response Consultant
Featured

F-Response Consultant

DFIR Tools
Primary Use Case
Cloud / Remote Acquisition
Tool Type
Standalone Tool
Developer
F-Response
F-Response Consultant + Covert
Featured

F-Response Consultant + Covert

DFIR Tools
Primary Use Case
Cloud / Remote Acquisition
Tool Type
Standalone Tool
Developer
F-Response
F-Response Enterprise
Featured

F-Response Enterprise

DFIR Tools
Primary Use Case
Cloud / Remote Acquisition
Tool Type
Standalone Tool
Developer
F-Response
F-Response Collect
Featured

F-Response Collect

DFIR Tools
Primary Use Case
Cloud / Remote Acquisition
Tool Type
Standalone Tool
Developer
F-Response
ProDiscover Incident Response

ProDiscover Incident Response

DFIR Tools
 ProDiscover Incident Response is a remote investigation and response platform for examining systems, collecting forensic data, reviewing volatile art...
Primary Use Case
Triage / Rapid Assessment
Tool Type
Platform / Service
Developer
ProDiscover
F-Response Universal
Featured

F-Response Universal

DFIR Tools
Primary Use Case
Cloud / Remote Acquisition
Tool Type
Standalone Tool
Developer
F-Response
SIFT Workstation

SIFT Workstation

DFIR Tools
 SIFT Workstation is a free SANS-maintained Linux-based DFIR environment that bundles open-source tools for full forensic examination, especially time...
Primary Use Case
Suite / Full Examination
Tool Type
Suite
Developer
SANS
Volexity Surge

Volexity Surge

DFIR Tools
 Volexity Surge Collect is a cross-platform memory acquisition tool designed to collect reliable, verifiable volatile data from Windows, Linux, and ma...
Primary Use Case
Collection / Acquisition
Tool Type
Standalone Tool
Developer
Volexity
CaptureGUARD Physical Memory Acquisition Hardware – ExpressCard

CaptureGUARD Physical Memory Acquisition Hardware – ExpressCard

DFIR Tools
 An ExpressCard-based hardware memory acquisition device that images physical RAM to WinDD-compatible dump files for later analysis. 
Primary Use Case
Collection / Acquisition
Tool Type
Hardware
Developer
WindowsSCOPE
CaptureGUARD Physical Memory Acquisition Hardware – PCIe Add-on

CaptureGUARD Physical Memory Acquisition Hardware – PCIe Add-on

DFIR Tools
A PCIe-based hardware memory acquisition device that captures raw physical memory into WinDD-compatible dump files with less dependence on the target...
Primary Use Case
Collection / Acquisition
Tool Type
Hardware
Developer
WindowsSCOPE
WindowsSCOPE Phantom Probe USB Dongle

WindowsSCOPE Phantom Probe USB Dongle

DFIR Tools
 USB 3.0 hardware dongle that runs the Phantom Probe agent to capture WindowsSCOPE memory snapshots from supported Windows systems. 
Primary Use Case
Collection / Acquisition
Tool Type
Hardware
Developer
WindowsSCOPE
CaptureGUARD Gateway – Access to Locked Computers

CaptureGUARD Gateway – Access to Locked Computers

DFIR Tools
 An ExpressCard-based hardware platform intended to enable live forensic access and acquisition on certain locked Windows systems. 
Primary Use Case
Collection / Acquisition
Tool Type
Hardware
Developer
WindowsSCOPE
WindowsSCOPE Forensic Archiving Appliance

WindowsSCOPE Forensic Archiving Appliance

DFIR Tools
 A forensic appliance for network-wide live memory collection, archiving, and cross-node analysis over time for incident response and enterprise inves...
Primary Use Case
Cloud / Remote Acquisition
Tool Type
Hardware
Developer
WindowsSCOPE
Magnet RAM Capture

Magnet RAM Capture

DFIR Tools
 Magnet RAM Capture is a free Windows memory-acquisition tool for preserving volatile evidence from a live system, including running processes, networ...
Primary Use Case
Collection / Acquisition
Tool Type
Standalone Tool
Developer
Magnet Forensics
Magnet Process Capture

Magnet Process Capture

DFIR Tools
 Magnet Process Capture is a free Magnet Forensics standalone utility for capturing memory from selected running processes rather than full system RAM...
Primary Use Case
Collection / Acquisition
Tool Type
Standalone Tool
Developer
Magnet Forensics
Magnet DumpIt for Windows

Magnet DumpIt for Windows

DFIR Tools
 Magnet DumpIt for Windows is a free Magnet Forensics standalone tool for fast acquisition of full Windows memory crash dumps. 
Primary Use Case
Collection / Acquisition
Tool Type
Standalone Tool
Developer
Magnet Forensics
Magnet Response

Magnet Response

DFIR Tools
 Magnet Response is a free Magnet Forensics standalone tool for quickly collecting and preserving incident-response data from local endpoints, includi...
Primary Use Case
Collection / Acquisition
Tool Type
Standalone Tool
Developer
Magnet Forensics
Belkasoft Incident Investigations

Belkasoft Incident Investigations

DFIR Tools
Windows-focused incident-investigation tool for identifying traces of hacking attempts by analyzing registry, event logs, memory dumps, and other syst...
Primary Use Case
Triage / Rapid Assessment
Tool Type
Standalone Tool
Developer
Belkasoft
Belkasoft Triage

Belkasoft Triage

DFIR Tools
Belkasoft T is a free DFIR triage tool built specifically for quick analysis of live Windows computers in time-sensitive situations. 
Primary Use Case
Triage / Rapid Assessment
Tool Type
Standalone Tool
Developer
Belkasoft

Main Menu