Belkasoft RAM Capturer

Belkasoft RAM Capturer

5 Stars
Description

Belkasoft RAM Capturer is a kernel-mode tool designed to capture the content of the computer's volatile memory in a forensically sound way. Developed by a forensic research company, Belkasoft RAM Capturer requires no installation and leaves as small a footprint as theoretically possible. Coming with 32-bit and 64-bit kernel-mode drivers, Belkasoft RAM Capturer is able to overcome most current anti-debugging and anti-dumping protection systems such as nProtect GameGuard. Unlike many other memory dumping tools operating strictly in user mode, Belkasoft RAM Capturer works in the system's most privileged kernel mode, being able to acquire the full content of the computer's RAM.

Certain applications, including multi-player computer games, communication tools, and malware implement anti-debugging measures to actively block third-party tools from accessing their memory sets. In mild, best-case scenarios these proactive measures will simply cause the memory dumping tool to read zeroes (or random data) instead of the actual information. In other cases (e.g. malware, Trojans, certain security applications), such systems may lock up or reset the PC, thus destroying the content of the volatile memory and making it absolutely impossible to dump RAM contents. Examples of such anti-debugging systems include nProtect GameGuard and the game of Karos.

Many forensic RAM acquisition tools will operate in the least privileged user mode, triggering these protection systems and serving no good to their users. Unlike many competing tools running in system's user mode, Belkasoft RAM Capturer comes equipped with 32-bit and 64-bit kernel drivers allowing the tool to operate in the most privileged kernel mode.
Belkasoft RAM Capturer leaves the smallest footprint possible, does not require installation and can be launched in seconds from a USB flash drive. Memory dumps acquired with Belkasoft RAM Capturer can be then analyzed with Belkasoft Evidence Center Live RAM Analysis.

Memory Image - Ram Image - Memory Dump - Capture Volatile Memory - Capture Ram - Capture Memory Content - Acquire Ram - Ram Acquisition - Create Memory Dump - Make Memory Dump - Dump Memory

Published By:Belkasoft

License Type:Freeware

Date Added:10 April, 2013

Version:1.0

Price:Free

Downloads:26

Size:69.0 KB

Platform: Win2000 , WinNT 4.x , WinServer , WinVista

More downloads from Belkasoft

Free tool to save the content of Facebook users' profiles for offline use. Designed for computer forensic and IT security specialists, the tool automates the routine of downloading Facebook pages and resources for offline examination and printout.

DateSep 25, 2014

AuthorBelkasoft

Size:1.7 MB

LicenseFreeware

Price:Free

PlatformWin2000, WinServer, WinVista, WinVista x64

CategoryCovert Surveillance

Belkasoft Facebook Profile Saver

Extract more digital evidence from suspects' hard drives than ever. With more than 250 types of artifacts, the tool extracts browser histories, chats, IM and social communications, documents etc. Data Carving, Live RAM, image and video file analysis.

DateSep 25, 2014

AuthorBelkasoft

Size:82.9 MB

LicenseShareware

Price:$1,099.95

PlatformWin2000, WinServer, WinVista, WinVista x64

CategoryCovert Surveillance

Forensic Studio Ultimate

Extract and analyze digital evidence with collaboration support. The Enterprise edition of Belkasoft Evidence Center enables team work with full collaboration support, adding user and permission management to the already impressive list of features.

DateSep 25, 2014

AuthorBelkasoft

Size:82.9 MB

LicenseShareware

Price:$1,499.95

PlatformWin2000, WinServer, WinVista, WinVista x64

CategoryCovert Surveillance

Belkasoft Evidence Center Enterprise

Extract many types of digital evidence from suspects' hard drives. Data Carving and Live RAM analysis enable the extraction of destroyed and difficult to recover evidence. More than 250 types of artifacts are extracted.

DateSep 25, 2014

AuthorBelkasoft

Size:82.9 MB

LicenseShareware

Price:$799.95

PlatformWin2000, WinServer, WinVista, WinVista x64

CategoryCovert Surveillance

Belkasoft Evidence Center

Extract and analyze log files, communication histories and contact databases of a wide range of more than 80 instant messenger applications. Analyze Skype, AOL, ICQ, MSN Messenger, Yahoo! Messenger, Miranda, MySpace IM, QIP, Trillian, AIM, QQ etc.

DateSep 25, 2014

AuthorBelkasoft

Size:82.9 MB

LicenseShareware

Price:$499.95

PlatformWin2000, WinServer, WinVista, WinVista x64

CategoryCovert Surveillance

Forensic IM Analyzer
What people say
- required fields
     
Related Downloads

Belkasoft Forensic Carver is e-crime/forensic tool that allows to extract and analyze deleted fragments from hard drive. It also supports carving drive images and RAM memory images

DateSep 25, 2014

Authorsoftpedia.com

Size:4.8 MB

LicenseShareware

PlatformMacintosh

CategoryBackup & Restore

Belkasoft Forensic Carver Professional is a useful software designed to help you get back erased data, allows for retrieving deleted information from hard drives and analyzing Live RAM in memory dumps

DateSep 25, 2014

Authorforensic.belkasoft.com

Size:4.8 MB

LicenseShareware

PlatformMacintosh

CategoryBackup & Restore

Instant RAM Booster assists you in managing the memory of your computer more efficiently. This leads to increase in the performance of your computer and makes it more stable.

DateSep 25, 2014

AuthorInstantRAMBooster.com

Size:1.6 MB

LicenseShareware

Price:$29.99

PlatformWin95, Win98, WinME, WinNT 4.x

CategorySystem Utilities

Instant RAM Booster

Software to monitor and free unused RAM. RAM Optimizer speeds up your computer system and helps prevent crashes by freeing unused RAM.

DateSep 25, 2014

AuthorWinEnhance

Size:591.0 KB

LicenseShareware

Price:$14.95

PlatformWindows All

CategoryOptimizers & Diagnostics

Mz Ram Booster is a freeware program, designed to improve the performance of your computer by auto-recovering RAM and fine tuning some system settings! It uses minimal resources and almost no CPU time.

DateSep 25, 2014

AuthorMz Ultimate Tools

Size:10.2 KB

LicenseFreeware

Price:Free

PlatformWin XP/2000/2003/Vista

CategoryOptimizers & Diagnostics