http://blogs.technet.com/robert_hensing/archive/2008/07/03/memory-dumpers-for-windows.aspxSo I still get IR related questions on occasion . . . one of which being 'what is the best way to dump memory on Windows'. I honestly am hopelessly out of touch - I haven't done IR in many years now - but I came across some intersting tools that seemen-USCommunityServer 2.1 SP1 (Build: 61025.2)http://blogs.technet.com/robert_hensing/archive/2008/07/03/memory-dumpers-for-windows.aspx#3093588Fri, 25 Jul 2008 11:38:56 GMTd5e57398-b9ef-4490-9955-07cbb4e4a80d:3093588Malta Info Security<p>Some intersting tools that seem to have released recently that I thought I'd share for the IR folks: First up - Suiche - of 'Sandman' fame released a memory dumping tool: <a rel="nofollow" target="_new" href="http://www.msuiche.net/2008/06/14/capture-memory-under-win2k3-or-vista-with-win32d">http://www.msuiche.net/2008/06/14/capture-memory-under-win2k3-or-vista-with-win32d</a></p>