Cyber Forensics Tools and Accessories

CaptureGUARD Physical Memory Acquisition Hardware – PCIe Add-on

This is a PCI Express add-on device* capable of imaging the physical memory of the computer it’s connected to. Creates dump files in the standard WinDD format that can be used with WindowsSCOPE Cyber Forensics or with other WinDD compatible dump analysis tools. Connects directly to the physical memory to read contents. Requires a small CaptureGUARD driver to be installed on the system for the device to be recognized and to store memory contents to file.

* PCIe Add-on solution can also take the form of an ExpressCard with a PCIe adapter