Magnet Process Capture is a free tool that allows you to capture memory from individual running processes. Whether you’re short on time or are only interested in specific processes, Magnet Process Capture can retrieve these specific processes and also provide less fragmented data and better recovery of larger data types.
When you search the captured memory with an analysis tool like Magnet AXIOM, Magnet Process Capture will also give you context on which specific processes contained any recovered artifacts.
Category: Imaging and Image Mounting
Category URL: http://www.dfir.training/component/mtree/forensic-utilities/imaging?Itemid=