Forensics

WinPmem: WinPmem memory acquisition driver and userspace

The WinPmem memory acquisition driver and userspace WinPmem has been the default open-source memory acquisition driver for windows for a long time. It used to live in the Rekall project...