how to perform memory dumps

1 post / 0 new
#1 Tue, 2017-01-31 13:06
ricercar
  • ricercar's picture
  • Offline
  • Last seen: 1 year 1 month ago
  • Joined: 2017-01-31

I want to perform forensic analysis on Alpine Linux, but the unique ecosystem makes it difficult to understand the process for creating memory dumps. I see that `dd` exists, but not /dev/kmem and /dev/mem is blocked.

Is there a standard method to dump the memory to file?