Blog

• Magnet RAM Capture: a 2026 acquisition guide (and what to do next)

  How to acquire a Windows RAM dump with Magnet RAM Capture step-by-step, what the .raw output contains, and how to analyze it without installing Volatility.

• A memory analysis workflow that finds things

  An end-to-end memory analysis workflow — triage, pivots, deep analysis, carving, reporting — built around what actually catches modern threats.

• Memory forensics tools compared: Volatility, Rekall, ramparser, Magnet

  Side-by-side comparison of the memory forensics tools that matter in 2026 — what each one does best, where each falls short, and how to combine them.

• RAM forensics: tools, techniques, and a 2026 workflow

  What RAM forensics is, the tools that matter (Volatility, Rekall, Magnet RAM Capture, ramparser), and a practical workflow from acquisition to a process list.

• How to analyze a RAM dump in your browser

  Step-by-step — open a memory dump, auto-detect the OS, and get a Windows or Linux process list in your browser with no tools to install.

• Is it safe to analyze memory dumps online?

  Memory dumps contain passwords, keys, and PII. Here is why ramparser is safe — it parses RAM images fully client-side, with zero upload.

• Memory dump file formats explained (.mem, .raw, .vmem, LiME)

  Which RAM dump formats work with browser memory forensics — raw physical images, VMware .vmem, LiME, crash dumps — and how to convert them.

• A browser-based Volatility alternative

  Run Volatility-style memory forensics online — no install, no upload. ramparser is a free web Volatility alternative for Windows and Linux RAM dumps.

• pslist vs psscan vs psxview — finding hidden processes

  How memory forensics enumerates Windows processes — ActiveProcessLinks (pslist), pool scanning (psscan), and the psxview cross-view that exposes DKOM rootkits.

• Getting started with ramparser

  How ramparser analyzes a RAM dump entirely in the browser — auto-detected OS, WebAssembly plugins, and zero upload.