Skip to main content

MEMORY_DUMP


This job template is designed to extract a memory dump of the targeted system.

note

The 262 - [πŸ”₯Volatile Info] Memory Dump (Win/Linux) collector utilizes Memoryze to extract memory for Windows, and will attempt to compile LiME on the targeted system for *Nix memory dumps.

Job Metadata
NameMEMORY_DUMP-TEMPLATE
Plugin Selection
πŸ“· CollectorsCustom Plugins:
  • 262 - [πŸ”₯Volatile Info] Memory Dump (Win/Linux) (πŸ’ΎβŒš)
Built-in Plugins:
β›™ Transports
  • WMI Transport (if Windows targets + credentials available)
  • SMB Transport (if Windows targets + credentials available)
  • SSH Transport (if *Nix targets + credentials available)
πŸ” Analyzers
  • Elasticsearch Analyzer
Configuration Options
β›­ PickupMaximum Pickup File Size
job.pickup.maxsize
16 Gigabytes
Maximum Timeout
job.pickup.timeout
10 Minutes