You couldn't, not via console access anyway. However, if the attacker gains RCE many IPMI implementations theoretically allow for DMA, but this is a significan

You couldn't, not via console access anyway. However, if the attacker gains RCE many IPMI implementations theoretically allow for DMA, but this is a significantly more complex attack to mount in practice with no public PoCs available.