Comparison of Memory Acquisition Software for Windows

1. Methodology

The tools

1.1 Output

DumpIt
Live RAM Capturer
FTK Imager
Magnet RAM Capture

2. Discussion

2.1 User interface and customizability

2.2 Acquisition time

Acquisition time
DumpIt .json
DumpIt
Belkasoft RAM Capturer
FTK Imager
Magnet RAM Capture

2.3 Occupied memory according to Task Manager

Memory usage according to Task Manager

2.4 Loaded DLLs

Loaded DLLs

2.5 Registry changes and invoked files

Registry changes and invoked files

2.6 Portable software

Portable software

3. Evaluation

Evaluation

References

Technology | Philosophy | Poetry | If you like my content, you may consider buying me a coffee. https://www.buymeacoffee.com/thanursan