“Due to popular demand, the your favorite and most popular memory forensics acquisition tools are back ! And for free!” – Matt Suiche.
The toolkit currently contains the two following utilities:
- DumpIt
- Hibr2Bin
The current version of DumpIt supports from Windows XP until Windows 10 64-bits, and provides extra information during the acquisition such as displaying the Directory Table Base and the address of the debugging data structures.
Hibr2Bin enables users to uncompress Windows Hibernation file . All the versions of Windows from XP up to 10 x64 are supported.
You can now access your free download after filling in this quick form:
