More generally, the Forensics Wiki has a list of available memory imaging tools: http://www.forensicswiki.org/wiki/Tools:Memory_Imaging http://www.forensicswik

More generally, the Forensics Wiki has a list of available memory imaging tools: http://www.forensicswiki.org/wiki/Tools:Memory_Imaging http://www.forensicswiki.org/wiki/Tools:Memory_Imaging Anecdotally, I've heard from forensic practitioners that the KnTTools are very solid (and, importantly, unlikely to crash a running system during acquisition), but they're not free.