Cyber Forensics Tools and Accessories

CaptureGUARD Physical Memory Acquisition Hardware – ExpressCard

This is an ExpressCard device capable of imaging the physical memory of the computer it’s connected to. Creates dump files in the standard WinDD format that can be used with WindowsSCOPE Cyber Forensics or with other WinDD compatible dump analysis tools. Connects directly to the physical memory to read contents. Requires a small CaptureGUARD driver to be installed on the system for the device to be recognized and to store memory contents to file.