Comparison of Memory Acquisition Software for Windows

1. Methodology

The tools

1.1 Output

DumpIt
Live RAM Capturer
FTK Imager
Magnet RAM Capture

2. Discussion

2.1 User interface and customizability

2.2 Acquisition time

Acquisition time
DumpIt .json
DumpIt
Belkasoft RAM Capturer
FTK Imager
Magnet RAM Capture

2.3 Occupied memory according to Task Manager

Memory usage according to Task Manager

2.4 Loaded DLLs

Loaded DLLs

2.5 Registry changes and invoked files

Registry changes and invoked files

2.6 Portable software

Portable software

3. Evaluation

Evaluation

References

--

--

Science. Wit. Art.

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store