Different tools for the same memory capture

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

I have used Mantech's mdd_1.3 and win32dd to capture RAM on my laptop.
The output file sizes are different. In real world, how do we decide
which tools to use to capture volatile memory?

In my test case now, I don't know which tool I should rely on.

One other question, what tools are used to analyze volatile images?


Site Timeline