Imager 3.4.0.1 | Ftk

: A hallmark of this version is its ability to dump RAM (volatile memory) and capture the pagefile on live systems to recover running processes, encryption keys, and active malware.