how to perform memory dumps
#1
Tue, 2017-01-31 13:06
ricercar
-
- Offline
- 1 year 1 month ago
- 2017-01-31
I want to perform forensic analysis on Alpine Linux, but the unique ecosystem makes it difficult to understand the process for creating memory dumps. I see that `dd` exists, but not /dev/kmem and /dev/mem is blocked.
Is there a standard method to dump the memory to file?